Search for vulnerabilities
Vulnerability details: VCID-tzfb-jgnk-mqam
Vulnerability ID VCID-tzfb-jgnk-mqam
Aliases CVE-2015-0211
GHSA-frhc-9hwc-x7j3
Summary Moodle allows attackers to obtain sensitive information mod/lti/ajax.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 does not consider the moodle/course:manageactivities and mod/lti:addinstance capabilities before proceeding with registered-tool list searches, which allows remote authenticated users to obtain sensitive information via requests to the LTI Ajax service.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47920
generic_textual MODERATE http://openwall.com/lists/oss-security/2015/01/19/1
epss 0.00199 https://api.first.org/data/v1/epss?cve=CVE-2015-0211
epss 0.00199 https://api.first.org/data/v1/epss?cve=CVE-2015-0211
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-frhc-9hwc-x7j3
generic_textual MODERATE https://github.com/moodle/moodle
generic_textual MODERATE https://github.com/moodle/moodle/commit/52555c36989b6704550ed0b3c6e832f5e7e150b7
generic_textual MODERATE https://github.com/moodle/moodle/commit/da4c33f510aabc0d7443c29a7c097cfd54b6c4a4
generic_textual MODERATE https://github.com/moodle/moodle/commit/faf0cd9098517cd6274219b58f6f4a278d26455d
generic_textual MODERATE https://github.com/moodle/moodle/commit/fc6619d5c0bb297e6736880ff5353bb668048002
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=278611
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2015-0211
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47920
http://openwall.com/lists/oss-security/2015/01/19/1
https://api.first.org/data/v1/epss?cve=CVE-2015-0211
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/52555c36989b6704550ed0b3c6e832f5e7e150b7
https://github.com/moodle/moodle/commit/da4c33f510aabc0d7443c29a7c097cfd54b6c4a4
https://github.com/moodle/moodle/commit/faf0cd9098517cd6274219b58f6f4a278d26455d
https://github.com/moodle/moodle/commit/fc6619d5c0bb297e6736880ff5353bb668048002
https://moodle.org/mod/forum/discuss.php?d=278611
https://nvd.nist.gov/vuln/detail/CVE-2015-0211
GHSA-frhc-9hwc-x7j3 https://github.com/advisories/GHSA-frhc-9hwc-x7j3
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.42386
EPSS Score 0.00199
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:27:15.447868+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-frhc-9hwc-x7j3/GHSA-frhc-9hwc-x7j3.json 36.1.3