CVE-2009-0499: CSRF
Published Feb 10, 2009
·Updated
Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php.
Affected Software
16 affected components
Moodle moodle=1.9.1
Moodle moodle=1.8.2
Moodle moodle=1.7.6
Moodle moodle=1.9.2
Moodle moodle=1.8.6
Moodle moodle=1.7.1
Moodle moodle=1.8.5
Moodle moodle=1.8.3
Moodle moodle=1.8.7
Moodle moodle=1.9.3
Moodle moodle=1.7.3
Moodle moodle=1.7.2
Moodle moodle=1.7.5
Moodle moodle=1.8.4
Moodle moodle=1.8.1
Moodle moodle=1.7.4
Event History
Feb 10, 2009
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0499?
CVE-2009-0499 has a medium severity rating due to its potential exploitation for unauthorized actions.
2
How do I fix CVE-2009-0499?
To fix CVE-2009-0499, upgrade Moodle to version 1.7.7, 1.8.8, or 1.9.4 or later.
3
What types of attacks does CVE-2009-0499 enable?
CVE-2009-0499 enables cross-site request forgery (CSRF) attacks that can lead to unauthorized deletion of forum posts.
4
Which Moodle versions are affected by CVE-2009-0499?
CVE-2009-0499 affects Moodle versions 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4.
5
Who is impacted by CVE-2009-0499?
Users of the affected Moodle versions may be impacted as attackers could exploit the CSRF vulnerability.