CVE-2015-5342: Medium severity moodle vulnerability
Published Feb 22, 2016
·Updated
The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state.
Affected Software
27 affected componentsFixes available
composer/moodle/moodle>=2.9.0<2.9.3
2.9.3
composer/moodle/moodle>=2.8.0<2.8.9
2.8.9
composer/moodle/moodle<2.7.11
2.7.11
Moodle moodle<=2.6.11
Moodle moodle=2.7.0
Moodle moodle=2.7.1
Moodle moodle=2.7.2
Moodle moodle=2.7.3
Moodle moodle=2.7.4
Moodle moodle=2.7.5
Moodle moodle=2.7.6
Moodle moodle=2.7.7
Moodle moodle=2.7.8
Moodle moodle=2.7.9
Moodle moodle=2.7.10
Moodle moodle=2.8.0
Moodle moodle=2.8.1
Moodle moodle=2.8.2
Moodle moodle=2.8.3
Moodle moodle=2.8.4
Moodle moodle=2.8.5
Moodle moodle=2.8.6
Moodle moodle=2.8.7
Moodle moodle=2.8.8
Moodle moodle=2.9.0
Moodle moodle=2.9.1
Moodle moodle=2.9.2
Event History
Feb 22, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-5342?
CVE-2015-5342 is classified as a medium severity vulnerability.
2
How do I fix CVE-2015-5342?
To fix CVE-2015-5342, update your Moodle installation to versions 2.7.11, 2.8.9, or 2.9.3 and above.
3
What types of access restrictions are bypassed by CVE-2015-5342?
CVE-2015-5342 allows remote authenticated users to bypass access restrictions to add or delete responses in the closed state.
4
Which versions of Moodle are affected by CVE-2015-5342?
CVE-2015-5342 affects Moodle versions through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3.
5
What module in Moodle is vulnerable to CVE-2015-5342?
The choice module in Moodle is vulnerable to CVE-2015-5342.