GHSA-8hxm-42v5-66hmMedium

Moodle vulnerable to Cross-Site Request Forgery

Published
May 13, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2011-4298 →

📋 Description

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.

🎯 Affected products2

  • composer/moodle/moodle:>= 2.0.0, < 2.0.5
  • composer/moodle/moodle:>= 2.1.0, < 2.1.2

🔗 References (6)