Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:32:22 +0000 CERTFR-2014-AVI-485 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 fkie_cve-2014-7836 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7836 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2014-7836 GHSA-wpq5-q3mj-8f3r — Moodle multiple cross-site request forgery (CSRF) vulnerabilities https://vulnerability.circl.lu/vuln/ghsa-wpq5-q3mj-8f3r <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.</p> https://vulnerability.circl.lu/vuln/ghsa-wpq5-q3mj-8f3r gsd-2014-7836 https://vulnerability.circl.lu/vuln/gsd-2014-7836 gsd-2014-7836 https://vulnerability.circl.lu/vuln/gsd-2014-7836