Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4589
HistoryJul 18, 2017 - 8:56 a.m.

Multiple Cross-Site Request Forgery (CSRF)

2017-07-1808:56:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.002

Percentile

52.5%

Moodle is vulnerable to multiple cross-site request forgery (CSRF) attacks. The attacks exist because mod/assign/locallib.php does not properly handle session checking in Assignment’s quick-grading, allowing any authenticated user to perform the attacks.