Search for vulnerabilities
Vulnerability details: VCID-g3v5-snuz-8khy
Vulnerability ID VCID-g3v5-snuz-8khy
Aliases CVE-2014-0126
GHSA-4wvg-7886-83gv
Summary Moodle cross-site request forgery (CSRF) vulnerability Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146
generic_textual MODERATE http://openwall.com/lists/oss-security/2014/03/17/1
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2014-0126
epss 0.00126 https://api.first.org/data/v1/epss?cve=CVE-2014-0126
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-4wvg-7886-83gv
generic_textual MODERATE https://github.com/moodle/moodle
generic_textual MODERATE https://github.com/moodle/moodle/commit/41a19bffeef0ee6b0560a5ff808fd4bd35075fa1
generic_textual MODERATE https://github.com/moodle/moodle/commit/caf766507771e07c1752ece1f37a32b2b4f6d8b9
generic_textual MODERATE https://github.com/moodle/moodle/commit/ea8647b39ec9cf1d73e04b05559bd12d97aa5229
generic_textual MODERATE https://github.com/moodle/moodle/commit/eee61675f042a9ec89f8f6d219b4ded010198fe4
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=256423
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2014-0126
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146
http://openwall.com/lists/oss-security/2014/03/17/1
https://api.first.org/data/v1/epss?cve=CVE-2014-0126
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/41a19bffeef0ee6b0560a5ff808fd4bd35075fa1
https://github.com/moodle/moodle/commit/caf766507771e07c1752ece1f37a32b2b4f6d8b9
https://github.com/moodle/moodle/commit/ea8647b39ec9cf1d73e04b05559bd12d97aa5229
https://github.com/moodle/moodle/commit/eee61675f042a9ec89f8f6d219b4ded010198fe4
https://moodle.org/mod/forum/discuss.php?d=256423
https://nvd.nist.gov/vuln/detail/CVE-2014-0126
GHSA-4wvg-7886-83gv https://github.com/advisories/GHSA-4wvg-7886-83gv
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.32896
EPSS Score 0.00126
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:26:26.749623+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4wvg-7886-83gv/GHSA-4wvg-7886-83gv.json 36.1.3