QwikSec

Security Database

CVE

CWE

Training

CVE-2014-0126

Published: Mar 22, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20140317 Moodle security notifications public

mailing-list

x_refsource_MLIST

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146

x_refsource_CONFIRM

https://moodle.org/mod/forum/discuss.php?d=256423

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.