Not rated
CVE-2017-7489 In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link
Description
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 2.x and 3.x | Versions not published |
References
- moodle.org moodle.org
Timeline
- Published
- Last modified
Other CVEs of Moodle 2.x and 3.x
The 9 CVEs of Moodle 2.x and 3.x →
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing
Not rated
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the…
Not rated
CVE-2017-2641
In Moodle 2.x and 3.x, SQL injection can occur via user preferences
Not rated
CVE-2016-7038
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed
Not rated