Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-7836 - Vulnerability Database

Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-7836

Medium

Reference: CVE-2014-7836

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-7836

Title: Moodle Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11 2.5.x before 2.5.9 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.