Lucene search

K
cvelistRedhatCVELIST:CVE-2014-7836
HistoryNov 24, 2014 - 11:00 a.m.

CVE-2014-7836

2014-11-2411:00:00
redhat
www.cve.org
6

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

52.7%

Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

52.7%