CVE-2015-5335
1 advisory.
Packagist/moodle/moodle CVE-2015-5335: medium 4.3
Moodle cross-site request forgery (CSRF) vulnerability
Action: Upgrade moodle/moodle to 2.7.11 or later.
composer require moodle/moodle:2.7.11composer require moodle/moodle:2.8.9composer require moodle/moodle:2.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.11 | - |
| 2.8.0 | 2.8.9 | - |
| 2.9.0 | 2.9.3 | - |
Fixed versions
| 2.7.11 | 2.8.9 | 2.9.3 |
Sources
- osv: GHSA-hpmv-wvq3-gj27
- https://nvd.nist.gov/vuln/detail/CVE-2015-5335
- https://github.com/moodle/moodle/commit/4bb9e1ad8af12b01499c68543e80f7c12fd557ea
- https://github.com/moodle/moodle/commit/77e072ebec68ba685551b886b71054d1feae6c94
- https://github.com/moodle/moodle/commit/7bf5c6a542efa113dbb241a113cb6079f0572443
- https://github.com/moodle/moodle/commit/a1168a7427f8fa1926a771fe8e6d10aeb6689686
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=323230
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51091
CVE-2015-5335 · published · modified · JSON