NVD

Id
28967  
Name
CVE-2014-0010  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 allow remote attackers to hijack the authentication of administrators for requests that delete (1) categories or (2) fields.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-01-20  
Modified Date
2016-04-06  
Seq
2014-0010  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152692 28967 CVE-2014-0010 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42883  View
152693 28967 CVE-2014-0010 FEDORA-2014-1377  View
152694 28967 CVE-2014-0010 FEDORA-2014-1396  View
152695 28967 CVE-2014-0010 [oss-security] 20140120 Moodle security notifications public  View
152696 28967 CVE-2014-0010 1029649  View
152697 28967 CVE-2014-0010 https://moodle.org/mod/forum/discuss.php?d=252416  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12347 JVNDB-2014-001222 Moodle の user/profile/index.php におけるクロスサイトリクエストフォージェリの脆弱性 Moodle の user/profile/index.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-0010 67411 CVE-2014-0010 28967 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001222.html 2014-01-20 2014-01-23 View