Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 3, 2018 | Feb 10, 2009 |
| Suse | — | Upgrade moodle-afUpgrade moodle-kaUpgrade moodle-bgUpgrade moodle-nnUpgrade moodle-srUpgrade moodleUpgrade moodle-skUpgrade moodle-bsUpgrade moodle-viUpgrade moodle-daUpgrade moodle-thUpgrade moodle-ruUpgrade moodle-jaUpgrade moodle-beUpgrade moodle-hrUpgrade moodle-plUpgrade moodle-elUpgrade moodle-fiUpgrade moodle-kmUpgrade moodle-caUpgrade moodle-arUpgrade moodle-csUpgrade moodle-lvUpgrade moodle-ptUpgrade moodle-heUpgrade moodle-roUpgrade moodle-deUpgrade moodle-noUpgrade moodle-gaUpgrade moodle-slUpgrade moodle-trUpgrade moodle-zh_cnUpgrade moodle-mi_tnUpgrade moodle-etUpgrade moodle-msUpgrade moodle-euUpgrade moodle-frUpgrade moodle-faUpgrade moodle-nlUpgrade moodle-esUpgrade moodle-de_duUpgrade moodle-tlUpgrade moodle-glUpgrade moodle-itUpgrade moodle-sqUpgrade moodle-svUpgrade moodle-soUpgrade moodle-ukUpgrade moodle-isUpgrade moodle-knUpgrade moodle-huUpgrade moodle-hiUpgrade moodle-idUpgrade moodle-ltUpgrade moodle-ko | Feb 17, 2015 | Feb 9, 2009 |
| Ubuntu | — | Upgrade moodle | Nov 8, 2024 | Feb 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub