What is CVE-2015-5335?

CVE-2015-5335 is a medium-severity vulnerability in Moodle, classified under Information Disclosure. CVSS score: 4.3/10. Published 2016-02-22.

How severe is CVE-2015-5335?

Medium severity. CVSS v3 base score is 4.3 out of 10.

CSRF in Moodle

CVE-2015-5335

Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL.

Vulnerability class: Information Disclosure

EPSS: 0.007 (48.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Moodle — versions 2.7.0, 2.7.1, 2.7.2
N/a — versions n/a

Weakness classification (CWE)

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2015-5335?: CVE-2015-5335 is a medium-severity vulnerability in Moodle, classified under Information Disclosure. CVSS score: 4.3/10. Published 2016-02-22.
How severe is CVE-2015-5335?: Medium severity. CVSS v3 base score is 4.3 out of 10.