CVE-2014-0125

Packagist/moodle/moodle CVE-2014-0125: medium, EPSS 1.93%

Moodle places a session key in a URL

Action: Upgrade moodle/moodle to 2.4.9 or later.

composer require moodle/moodle:2.4.9

composer require moodle/moodle:2.5.5

composer require moodle/moodle:2.6.2

Affected

Fixed versions

Sources

• osv: GHSA-j465-7mp6-3xg3
• https://nvd.nist.gov/vuln/detail/CVE-2014-0125
• https://github.com/moodle/moodle/commit/4bc5dd32178cbaa62c466f74bf6d0ebafb697818
• https://github.com/moodle/moodle/commit/a71a6de914bec01df4268d0547c7a52917c4192f
• https://github.com/moodle/moodle/commit/ee8f17db890d7fa1bfc2cfd49ff8d21b41d29331
• https://github.com/moodle/moodle/commit/f4f0aa27d43527c15070d00bc96be879876ccc38
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=256422
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29409
• http://openwall.com/lists/oss-security/2014/03/17/1

CVE-2014-0125 · published 2022-05-13T01:12:50Z · modified 2024-12-07T05:40:12.071174Z · JSON