What is GHSA-j5rc-cr5w-vfg6?

GHSA-j5rc-cr5w-vfg6 is a security advisory published by GitHub Security Advisories with Medium severity. Moodle Session Fixation vulnerability

Which CVE IDs does GHSA-j5rc-cr5w-vfg6 cover?

GHSA-j5rc-cr5w-vfg6 covers the following CVE IDs: CVE-2010-1613. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-j5rc-cr5w-vfg6?

GHSA-j5rc-cr5w-vfg6 affects 1 product, including: composer/moodle/moodle:\u003e= 1.8.0, \u003c 1.9.8.

GHSA-j5rc-cr5w-vfg6Medium

Moodle Session Fixation vulnerability

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

April 11, 2025

🔗 CVE IDs covered (1)

CVE-2010-1613 →

📋 Description

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.

🎯 Affected products1

composer/moodle/moodle:>= 1.8.0, < 1.9.8

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2010-1613
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://moodle.org/security
https://github.com/advisories/GHSA-j5rc-cr5w-vfg6