Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-7491
4.3
MEDIUMCVSS v2
Published
May 15, 2017
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform= 2.7.1, = 3.1.0, = 2.7.0, = 3.0.7, = 3.2.0, = 2.7.6, = 2.7.14, = 2.7.11, = 2.7.2, = 2.7.4, = 3.0.0, = 3.2.2, = 2.7.16, = 2.7.9, = 2.7.12, = 3.0.2, = 3.0.4, = 3.0.5, = 3.0.6, = 2.7.15, = 2.7.3, = 2.7.17, = 2.7.18, = 3.1.1, = 2.7.5, = 2.7.7, = 2.7.10, = 3.0.3, = 3.0.1, = 3.0.8, = 3.1.3, = 3.2.1, = 2.7.8, = 2.7.13, = 3.1.2, = 3.1.4, >= 3.2, < 3.2.3, >= 3.1, < 3.1.6, >= 3.0, < 3.0.10, >= 2.7, < 2.7.20NVD
moodle
NPMModel module for node for use with both mongodb and mysql.
NPMModel module for node for use with both mongodb and mysql.= 2.7.1, = 3.1.0, = 2.7.0, = 3.0.7, = 3.2.0, = 2.7.6, = 2.7.14, = 2.7.11, = 2.7.2, = 2.7.4, = 3.0.0, = 3.2.2, = 2.7.16, = 2.7.9, = 2.7.12, = 3.0.2, = 3.0.4, = 3.0.5, = 3.0.6, = 2.7.15, = 2.7.3, = 2.7.17, = 2.7.18, = 3.1.1, = 2.7.5, = 2.7.7, = 2.7.10, = 3.0.3, = 3.0.1, = 3.0.8, = 3.1.3, = 3.2.1, = 2.7.8, = 2.7.13, = 3.1.2, = 3.1.4NVD
RubyGems