Aller au contenu
Se connecter
6.5 Moyenne

CVE-2018-16854 A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier

Description

A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.

Produits et versions touchés

Produit Versions touchées Corrigé en
moodle 3.6 Pas de correctif indiqué
moodle 3.5.3 Pas de correctif indiqué
moodle 3.4.6 Pas de correctif indiqué
moodle 3.3.9 Pas de correctif indiqué
moodle 3.1.15 Pas de correctif indiqué

Autres CVE de moodle

Les 22 CVE de moodle →
CVE-2020-10738 A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier… 7.5 Élevée CVE-2019-14880 A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier 4.8 Moyenne CVE-2019-14881 A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user… 6.1 Moyenne CVE-2019-14884 A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS… 6.1 Moyenne
Suivre cette CVE