CVE-2012-5472: Medium severity moodle vulnerability
Published Nov 21, 2012
·Updated
lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field.
Affected Software
7 affected components
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Moodle moodle=2.2.4
Moodle moodle=2.2.5
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Event History
Nov 21, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5472?
CVE-2012-5472 has a medium severity rating as it allows remote authenticated users to bypass access restrictions.
2
How do I fix CVE-2012-5472?
To fix CVE-2012-5472, upgrade to Moodle version 2.2.6 or 2.3.3 or later.
3
What versions of Moodle are affected by CVE-2012-5472?
CVE-2012-5472 affects Moodle versions 2.2.1 through 2.2.5 and 2.3.1 through 2.3.2.
4
What type of vulnerability is CVE-2012-5472?
CVE-2012-5472 is a security vulnerability related to access control in Moodle.
5
Can CVE-2012-5472 be exploited remotely?
Yes, CVE-2012-5472 can be exploited by remote authenticated users.