Moodle Feedback Activity Security Bypass Vulnerability
BID:66326
Info
Moodle Feedback Activity Security Bypass Vulnerability
| Bugtraq ID: | 66326 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-0127 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 17 2014 12:00AM |
| Updated: | Apr 13 2015 10:12PM |
| Credit: | Tomasz Muras |
| Vulnerable: |
Moodle Moodle 2.6.1 Moodle Moodle 2.5.4 Moodle Moodle 2.5.2 Moodle Moodle 2.5.1 Moodle Moodle 2.4.8 Moodle Moodle 2.4.6 Moodle Moodle 2.4.5 Moodle Moodle 2.4.4 Moodle Moodle 2.4.3 Moodle Moodle 2.6 Moodle Moodle 2.5.3 Moodle Moodle 2.5 Moodle Moodle 2.4.7 Moodle Moodle 2.4.2 Moodle Moodle 2.4.1 Moodle Moodle 2.4 |
| Not Vulnerable: |
Moodle Moodle 2.6.2 Moodle Moodle 2.5.5 Moodle Moodle 2.4.9 |
Exploit / POC
Moodle Feedback Activity Security Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Moodle Feedback Activity Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Moodle Feedback Activity Security Bypass Vulnerability
References:
References:
- Moodle Homepage (Moodle)
- MSA-14-0005: Access issue in Feedback activity (Moodle)