CVEvulnerability
CVE-2016-2190
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.
Affected configurations
• moodle moodle (<= 2.6.11)
• moodle moodle 2.7.0
• moodle moodle 2.7.1
• moodle moodle 2.7.2
• moodle moodle 2.7.3
• moodle moodle 2.7.4
• moodle moodle 2.7.5
• moodle moodle 2.7.6
• moodle moodle 2.7.7
• moodle moodle 2.7.8
• moodle moodle 2.7.9
• moodle moodle 2.7.10
• moodle moodle 2.7.11
• moodle moodle 2.7.12
• moodle moodle 2.8.0
• moodle moodle 2.8.1
• moodle moodle 2.8.2
• moodle moodle 2.8.3
• moodle moodle 2.8.4
• moodle moodle 2.8.5
• moodle moodle 2.8.6
• moodle moodle 2.8.7
• moodle moodle 2.8.8
• moodle moodle 2.8.9
• moodle moodle 2.8.10
• moodle moodle 2.9.0
• moodle moodle 2.9.1
• moodle moodle 2.9.2
• moodle moodle 2.9.3
• moodle moodle 2.9.4
• moodle moodle 3.0.0
• moodle moodle 3.0.1
• moodle moodle 3.0.2
Related
Weakness · not in database (1)
References
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651 git.moodle.org
- http://www.openwall.com/lists/oss-security/2016/03/21/1 www.openwall.com
- http://www.securitytracker.com/id/1035333 www.securitytracker.com
- https://moodle.org/mod/forum/discuss.php?d=330181 Vendor Advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651 git.moodle.org
- http://www.openwall.com/lists/oss-security/2016/03/21/1 www.openwall.com
- http://www.securitytracker.com/id/1035333 www.securitytracker.com
- https://moodle.org/mod/forum/discuss.php?d=330181 Vendor Advisory