CVE-2010-2231
Publication date 28 June 2010
Last updated 24 July 2024
Ubuntu priority
Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter.
Status
Package | Ubuntu Release | Status |
---|---|---|
moodle | 13.10 saucy |
Not affected
|
13.04 raring |
Not affected
|
|
12.10 quantal |
Not affected
|
|
12.04 LTS precise |
Not affected
|
|
11.10 oneiric |
Not affected
|
|
11.04 natty |
Not affected
|
|
10.10 maverick | Ignored end of life | |
10.04 LTS lucid | Ignored end of life | |
9.10 karmic | Ignored end of life | |
9.04 jaunty | Ignored end of life | |
8.04 LTS hardy | Ignored end of life | |
6.06 LTS dapper |
Not affected
|