mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
104 lines
3.5 KiB
JSON
104 lines
3.5 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "secalert@redhat.com",
|
|
"ID": "CVE-2018-16854",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "moodle",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "3.6"
|
|
},
|
|
{
|
|
"version_value": "3.5.3"
|
|
},
|
|
{
|
|
"version_value": "3.4.6"
|
|
},
|
|
{
|
|
"version_value": "3.3.9"
|
|
},
|
|
{
|
|
"version_value": "3.1.15"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "[UNKNOWN]"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15."
|
|
}
|
|
]
|
|
},
|
|
"impact": {
|
|
"cvss": [
|
|
[
|
|
{
|
|
"vectorString": "6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
|
|
"version": "3.0"
|
|
}
|
|
]
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-352"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16854",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16854"
|
|
},
|
|
{
|
|
"name": "1042154",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id/1042154"
|
|
},
|
|
{
|
|
"name": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183"
|
|
},
|
|
{
|
|
"name": "106017",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/106017"
|
|
},
|
|
{
|
|
"name": "https://moodle.org/mod/forum/discuss.php?d=378731",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://moodle.org/mod/forum/discuss.php?d=378731"
|
|
}
|
|
]
|
|
}
|
|
} |