CVE-2015-5265: Medium severity moodle vulnerability
Published Feb 22, 2016
·Updated
The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary files by using a manage-files button in a text editor.
Affected Software
24 affected componentsFixes available
composer/moodle/moodle>=2.9.0<2.9.2
2.9.2
composer/moodle/moodle>=2.8.0<2.8.8
2.8.8
composer/moodle/moodle>=2.7.0<2.7.10
2.7.10
Moodle moodle<=2.6.11
Moodle moodle=2.7.0
Moodle moodle=2.7.1
Moodle moodle=2.7.2
Moodle moodle=2.7.3
Moodle moodle=2.7.4
Moodle moodle=2.7.5
Moodle moodle=2.7.6
Moodle moodle=2.7.7
Moodle moodle=2.7.8
Moodle moodle=2.7.9
Moodle moodle=2.8.0
Moodle moodle=2.8.1
Moodle moodle=2.8.2
Moodle moodle=2.8.3
Moodle moodle=2.8.4
Moodle moodle=2.8.5
Moodle moodle=2.8.6
Moodle moodle=2.8.7
Moodle moodle=2.9.0
Moodle moodle=2.9.1
Event History
Feb 22, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-5265?
CVE-2015-5265 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2015-5265?
To fix CVE-2015-5265, upgrade Moodle to version 2.7.10, 2.8.8, or 2.9.2 or later.
3
What are the vulnerable versions associated with CVE-2015-5265?
CVE-2015-5265 affects Moodle versions prior to 2.7.10, 2.8.8, and 2.9.2.
4
Who can exploit CVE-2015-5265?
CVE-2015-5265 can be exploited by remote authenticated users who possess the manage-files button.
5
What capabilities are not considered in CVE-2015-5265's vulnerability?
CVE-2015-5265 does not consider the mod/wiki:managefiles capability before authorizing file management.