CVE-2014-0126

Packagist/moodle/moodle CVE-2014-0126: medium

Moodle cross-site request forgery (CSRF) vulnerability

Action: Upgrade moodle/moodle to 2.4.9 or later.

composer require moodle/moodle:2.4.9

composer require moodle/moodle:2.5.5

composer require moodle/moodle:2.6.2

Affected

Fixed versions

Sources

• osv: GHSA-4wvg-7886-83gv
• https://nvd.nist.gov/vuln/detail/CVE-2014-0126
• https://github.com/moodle/moodle/commit/41a19bffeef0ee6b0560a5ff808fd4bd35075fa1
• https://github.com/moodle/moodle/commit/caf766507771e07c1752ece1f37a32b2b4f6d8b9
• https://github.com/moodle/moodle/commit/ea8647b39ec9cf1d73e04b05559bd12d97aa5229
• https://github.com/moodle/moodle/commit/eee61675f042a9ec89f8f6d219b4ded010198fe4
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=256423
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146
• http://openwall.com/lists/oss-security/2014/03/17/1

CVE-2014-0126 · published 2022-05-13T01:12:51Z · modified 2024-12-07T05:39:35.120408Z · JSON