Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-7838 - Vulnerability Database
Moodle

Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2014-7838

Medium
Reference: CVE-2014-7838
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-7838
Title: Moodle Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11 2.5.x before 2.5.9 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within (1) mod/forum/deprecatedlib.php (2) mod/forum/forum.js (3) mod/forum/index.php or (4) mod/forum/lib.php.