CVE-2015-3175: Medium severity moodle vulnerability
Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3175?
CVE-2015-3175 is considered a medium severity vulnerability due to its potential for exploitation in phishing attacks.
How do I fix CVE-2015-3175?
To fix CVE-2015-3175, upgrade Moodle to versions 2.6.11, 2.7.8, or 2.8.6 or later.
What kind of attack can be performed using CVE-2015-3175?
CVE-2015-3175 allows attackers to perform open redirect attacks, leading users to arbitrary websites.
Which versions of Moodle are affected by CVE-2015-3175?
CVE-2015-3175 affects Moodle versions up to 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6.
Is there a workaround for CVE-2015-3175 while waiting for an update?
There is no specific workaround for CVE-2015-3175; the recommended action is to upgrade to a fixed version.