https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T19:32:22.162199+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-04T19:32:22.167955+00:00 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7836 fkie_cve-2014-7836 2026-10-04T19:32:22.168029+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.

 https://vulnerability.circl.lu/vuln/ghsa-wpq5-q3mj-8f3r GHSA-wpq5-q3mj-8f3r — Moodle multiple cross-site request forgery (CSRF) vulnerabilities 2026-10-04T19:32:22.168104+00:00

Affected: Packagist: moodle/moodle

Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.

 https://vulnerability.circl.lu/vuln/gsd-2014-7836 gsd-2014-7836 2026-10-04T19:32:22.168151+00:00 gsd-2014-7836