{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/43764?format=json","vulnerability_id":"VCID-j3t3-svwb-p7bn","summary":"Cross-Site Request Forgery (CSRF)\nMultiple cross-site request forgery (CSRF) vulnerabilities in mod/assign/locallib.php in the Assignment subsystem in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allow remote attackers to hijack the authentication of teachers for quick-grading requests.","aliases":[{"alias":"CVE-2014-0213"},{"alias":"GHSA-h75f-hjcr-cvh8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/62206?format=json","purl":"pkg:composer/moodle/moodle@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/62207?format=json","purl":"pkg:composer/moodle/moodle@2.5.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/62208?format=json","purl":"pkg:composer/moodle/moodle@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.3"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/62041?format=json","purl":"pkg:composer/moodle/moodle@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1ehh-qz6c-ykhp"},{"vulnerability":"VCID-1whm-dsv7-t7gm"},{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-4v57-bu85-syhr"},{"vulnerability":"VCID-4xqt-yugc-qufr"},{"vulnerability":"VCID-5ru2-1n1f-afa4"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-6v43-drd7-ufd7"},{"vulnerability":"VCID-7g7m-bu5q-gbcx"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-88pw-zwqn-cqfd"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-cvqm-kjhx-q7ej"},{"vulnerability":"VCID-czph-uxwr-5uge"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-ea5s-xphb-6ub7"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-gdz8-d8j3-nqdh"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-j3t3-svwb-p7bn"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-q3wv-9hj6-vbgt"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-r88h-mteg-yka9"},{"vulnerability":"VCID-rdfn-52p2-afa7"},{"vulnerability":"VCID-s5cy-eva4-wbaf"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-ucg8-htfc-2bhn"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-vrfy-36yc-muhr"},{"vulnerability":"VCID-vs2j-b4qg-nbgu"},{"vulnerability":"VCID-vwyj-z4gf-8fg5"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/62042?format=json","purl":"pkg:composer/moodle/moodle@2.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1ehh-qz6c-ykhp"},{"vulnerability":"VCID-1rar-m2g3-27ag"},{"vulnerability":"VCID-1whm-dsv7-t7gm"},{"vulnerability":"VCID-29yj-e9bd-queq"},{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-3xwm-hqap-8bct"},{"vulnerability":"VCID-4v57-bu85-syhr"},{"vulnerability":"VCID-4xqt-yugc-qufr"},{"vulnerability":"VCID-5c29-qn3p-3yde"},{"vulnerability":"VCID-5ru2-1n1f-afa4"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-6v43-drd7-ufd7"},{"vulnerability":"VCID-7g7m-bu5q-gbcx"},{"vulnerability":"VCID-7x8g-tdd5-kqbs"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-88pw-zwqn-cqfd"},{"vulnerability":"VCID-8q4n-d565-kfbn"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bfmx-cwap-8yhp"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-cvqm-kjhx-q7ej"},{"vulnerability":"VCID-czph-uxwr-5uge"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-ea5s-xphb-6ub7"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fs9k-21es-rygd"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-fumj-9pun-zfc5"},{"vulnerability":"VCID-gdz8-d8j3-nqdh"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-hbky-xx53-vkct"},{"vulnerability":"VCID-hck4-emsr-q7dc"},{"vulnerability":"VCID-j3t3-svwb-p7bn"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-krn6-pwk5-ake2"},{"vulnerability":"VCID-kzwd-2e6n-fkbm"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-q3wv-9hj6-vbgt"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-r88h-mteg-yka9"},{"vulnerability":"VCID-rdfn-52p2-afa7"},{"vulnerability":"VCID-s5cy-eva4-wbaf"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-ucg8-htfc-2bhn"},{"vulnerability":"VCID-uptz-tj66-7yfk"},{"vulnerability":"VCID-uvgt-7m5a-xkdc"},{"vulnerability":"VCID-v4qm-48kk-pfaz"},{"vulnerability":"VCID-v7zm-cw8w-6yf8"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vda3-4fgr-gfbw"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-vrfy-36yc-muhr"},{"vulnerability":"VCID-vs2j-b4qg-nbgu"},{"vulnerability":"VCID-vwyj-z4gf-8fg5"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-xnmk-jah2-ufce"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.0"}],"references":[{"reference_url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44606","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44606"},{"reference_url":"http://openwall.com/lists/oss-security/2014/05/19/1","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://openwall.com/lists/oss-security/2014/05/19/1"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0213","reference_id":"","reference_type":"","scores":[{"value":"0.00126","scoring_system":"epss","scoring_elements":"0.31397","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0213"},{"reference_url":"https://github.com/moodle/moodle","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle"},{"reference_url":"https://github.com/moodle/moodle/commit/0cd720fe512d48c2af81fc054c042c9c63e8a234","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/0cd720fe512d48c2af81fc054c042c9c63e8a234"},{"reference_url":"https://github.com/moodle/moodle/commit/436ef91ceb3cedfbf7297cb9e09ef69c0b323d77","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/436ef91ceb3cedfbf7297cb9e09ef69c0b323d77"},{"reference_url":"https://github.com/moodle/moodle/commit/a57eacc114ee8e5423102000c9954f66f03ffeb2","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/a57eacc114ee8e5423102000c9954f66f03ffeb2"},{"reference_url":"https://github.com/moodle/moodle/commit/f977d376c936ba09872884dc822463e76f6cfeb6","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/f977d376c936ba09872884dc822463e76f6cfeb6"},{"reference_url":"https://moodle.org/mod/forum/discuss.php?d=260361","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://moodle.org/mod/forum/discuss.php?d=260361"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0213","reference_id":"CVE-2014-0213","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0213"},{"reference_url":"https://github.com/advisories/GHSA-h75f-hjcr-cvh8","reference_id":"GHSA-h75f-hjcr-cvh8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-h75f-hjcr-cvh8"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":352,"name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-j3t3-svwb-p7bn"}