Lucene search
Veracode Vulnerability DatabaseVERACODE:4792HistoryJul 29, 2017 - 4:21 p.m.
Cross-site Request Forgery (CSRF)
2017-07-2916:21:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.002
Percentile
52.7%
Moodle is vulnerable to cross-site request forgery (CSRF) attacks. A session key isn’t present when setting a tracker preference. This allows remote attackers to hijack the authentication of users requesting a tracker preference.
Related
osv
osv
prion
prion
Cross site request forgery (csrf)
2014-11-24 11:59:00
ubuntucve
ubuntucve
CVE-2014-7838
2014-11-24 00:00:00
github
github
cve
cve
CVE-2014-7838
2014-11-24 11:59:08
cvelist
cvelist
CVE-2014-7838
2014-11-24 11:00:00
nvd
nvd
CVE-2014-7838
2014-11-24 11:59:08
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50