Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2015-0213

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

  • Published: Jun 1, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-0213
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
Composer icon moodle / moodle 2.7.1 2.7.1.x
Composer icon moodle / moodle 2.5.1 2.5.1.x
Composer icon moodle / moodle 2.5.3 2.5.3.x
Composer icon moodle / moodle 2.5.7 2.5.7.x
Composer icon moodle / moodle 2.7.2 2.7.2.x
Composer icon moodle / moodle 2.5.5 2.5.5.x
Composer icon moodle / moodle 2.6.1 2.6.1.x
Composer icon moodle / moodle 2.5.2 2.5.2.x
Composer icon moodle / moodle 2.5.8 2.5.8.x
Composer icon moodle / moodle 2.5.6 2.5.6.x
Composer icon moodle / moodle - 2.5.9.x
Composer icon moodle / moodle 2.6.5 2.6.5.x
Composer icon moodle / moodle 2.7.3 2.7.3.x
Composer icon moodle / moodle 2.6.2 2.6.2.x
Composer icon moodle / moodle 2.7.0 2.7.0.x
Composer icon moodle / moodle 2.6.4 2.6.4.x
Composer icon moodle / moodle 2.5.4 2.5.4.x
Composer icon moodle / moodle 2.6.3 2.6.3.x
Composer icon moodle / moodle 2.6.6 2.6.6.x
Composer icon moodle / moodle 2.5.0 2.5.0.x
Composer icon moodle / moodle 2.6.0 2.6.0.x
Composer icon moodle / moodle 2.8.0 2.8.0.x