Moodle 'forum_get_discussions()' Function Security Bypass Vulnerability
BID:71126
Info
Moodle 'forum_get_discussions()' Function Security Bypass Vulnerability
| Bugtraq ID: | 71126 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-7834 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 17 2014 12:00AM |
| Updated: | Apr 16 2015 06:12PM |
| Credit: | Petr Skoda |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Moodle 'forum_get_discussions()' Function Security Bypass Vulnerability
Moodle is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Moodle is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
References
Moodle 'forum_get_discussions()' Function Security Bypass Vulnerability
References:
References:
- MDL-45303 Web Services: forum_discussions not checking groups (Moodle)
- Moodle Homepage (Moodle)
- MSA-14-0043: Lack of group check in web service for Forum (Moodle)
- weekly release 2.9dev (Moodle)