Cross-Site Request Forgery (CSRF) Vulnerabilities in Moodle Mod/Wiki Components

Cross-Site Request Forgery (CSRF) Vulnerabilities in Moodle Mod/Wiki Components

CVE-2011-4298 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.

Learn more about our User Device Pen Test.