Vulnerability Database

290,301

Total vulnerabilities in the database

CVE-2015-5331

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API.

  • Published: Feb 22, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-5331
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:P/A:N

CWEs:

Software From Fixed in
moodle / moodle 2.9.1 2.9.1.x
moodle / moodle 2.9.2 2.9.2.x
moodle / moodle 2.9.0 2.9.0.x