CVE-2015-5331

4

MEDIUMCVSS v2

Published

February 22, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API.

moodle/moodle

GitHubMoodle - the world's open source learning platform

= 2.9.1, = 2.9.2, = 2.9.0, >= 2.9.0, < 2.9.3NVD

moodle

NPMModel module for node for use with both mongodb and mysql.

= 2.9.1, = 2.9.2, = 2.9.0NVD

moodle

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Moodle web services connection library

= 2.9.1, = 2.9.2, = 2.9.0NVD

moodle

RubyGemsInteract with Moodle from ruby

= 2.9.1, = 2.9.2, = 2.9.0NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

= 2.9.1, = 2.9.2, = 2.9.0NVD

Security Advisories

CVE-2015-5331

Description

More on this CVE