Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2015-5335

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-hpmv-wvq3-gj27

Moodle cross-site request forgery (CSRF) vulnerability Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL.

gitlab/packagist/moodle/moodle/CVE-2015-5335

Exposure of Sensitive Information to an Unauthorized Actor Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL.