CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration…

published May 15, 2017

CVSS
—
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00518 · 42.9th percentile
Published
2017-05-15T14:00Z
EPSS history
Timeline
  • 15 MAY 14:00Z
    In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration…
    cvelistv5