Description

In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.

Remediation

References

CVE-2017-7489

Related Vulnerabilities

Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58184)

Dolibarr Other Vulnerability (CVE-2022-0414)

WordPress Plugin youForms for WordPress-Creating Forms for CopeCart Cross-Site Scripting (1.0.5)

Roundcube Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-62641)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (4.6.0.1)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities CWE-269 CVE-2017-7489