https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T19:32:21.336227+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-04T19:32:21.339315+00:00 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7838 fkie_cve-2014-7838 2026-10-04T19:32:21.339360+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within (1) mod/forum/deprecatedlib.php, (2) mod/forum/forum.js, (3) mod/forum/index.php, or (4) mod/forum/lib.php.

 https://vulnerability.circl.lu/vuln/ghsa-43r4-vm25-qm78 GHSA-43r4-vm25-qm78 — Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module 2026-10-04T19:32:21.339396+00:00

Affected: Packagist: moodle/moodle

Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within (1) mod/forum/deprecatedlib.php, (2) mod/forum/forum.js, (3) mod/forum/index.php, or (4) mod/forum/lib.php.

 https://vulnerability.circl.lu/vuln/gsd-2014-7838 gsd-2014-7838 2026-10-04T19:32:21.339425+00:00 gsd-2014-7838