Lucene search
Veracode Vulnerability DatabaseVERACODE:4701HistoryJul 26, 2017 - 9:22 a.m.
Bypass Access Restrictions
2017-07-2609:22:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.001
Percentile
46.9%
Moodle is vulnerable to bypassing of access restrictions. The bypass is possible because tag/tag_autocomplete.php ignores the moodle/tag:edit capability before adding a tag, allowing any authenticated users to launch attack through an AJAX request.
Related
cve
cve
CVE-2014-7846
2014-11-24 11:59:11
github
github
Moodle does not consider the moodle/tag:edit capability before adding a tag
2022-05-13 01:12:43
osv
osv
Moodle does not consider the moodle/tag:edit capability before adding a tag
2022-05-13 01:12:43
prion
prion
Cross site request forgery (csrf)
2014-11-24 11:59:00
ubuntucve
ubuntucve
CVE-2014-7846
2014-11-24 00:00:00
nvd
nvd
CVE-2014-7846
2014-11-24 11:59:11
cvelist
cvelist
CVE-2014-7846
2014-11-24 11:00:00
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50