Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2017-7491 - Vulnerability Database

Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2017-7491

Medium

Reference: CVE-2017-7491

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-7491

Title: Moodle Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

In Moodle 2.x and 3.x a CSRF attack is possible that allows attackers to change the quotnumber of courses displayed in the course overview blockquot configuration setting.