Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-sa6m-ecv7-x3ew
Vulnerability ID VCID-sa6m-ecv7-x3ew
Aliases CVE-2016-2157
GHSA-f5pm-c4cw-563p
Summary Cross-Site Request Forgery (CSRF) Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage Assignment plugins.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53031
https://github.com/moodle/moodle/commit/01b19e761f94a4f3615d5c8f6314309aa83469f3
https://github.com/moodle/moodle/commit/1452f1e1d37d816648e3e015296de59509847287
https://github.com/moodle/moodle/commit/55ba3a26d2710ce3c5f13287b0c3538b9a934fa4
https://github.com/moodle/moodle/commit/85984545a937b0790c355473d7295eb60b0265eb
https://github.com/moodle/moodle/commit/a0cd21cd5cc63961243518a58e9d5d01182dbbb4
https://moodle.org/mod/forum/discuss.php?d=330179
https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333
http://www.openwall.com/lists/oss-security/2016/03/21/1
CVE-2016-2157 https://nvd.nist.gov/vuln/detail/CVE-2016-2157
GHSA-f5pm-c4cw-563p https://github.com/advisories/GHSA-f5pm-c4cw-563p
No exploits are available.
There are no known vectors.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-06-02T04:43:01.466929+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2016-2157.yml 38.6.0