NVD

Id
35131  
Name
CVE-2014-7838  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within (1) mod/forum/deprecatedlib.php, (2) mod/forum/forum.js, (3) mod/forum/index.php, or (4) mod/forum/lib.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-24  
Modified Date
2015-09-03  
Seq
2014-7838  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
179813 35131 CVE-2014-7838 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48019  View
179814 35131 CVE-2014-7838 [oss-security] 20141117 Moodle security issues are now public  View
179815 35131 CVE-2014-7838 1031215  View
179816 35131 CVE-2014-7838 https://moodle.org/mod/forum/discuss.php?d=275164  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16733 JVNDB-2014-005608 Moodle の Forum モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Moodle の Forum モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-7838 75131 CVE-2014-7838 35131 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005608.html 2014-11-17 2014-11-25 View