PT-2017-17766

CVE-2017-7489

·

Published

2017-05-15

·

Updated

2022-05-13

Description by

CVSS 2.0
6.5
Medium
MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x
Description The issue allows remote authenticated users to take ownership of arbitrary blogs by editing an external blog link.
Recommendations For Moodle versions 2.x through 3.x, update to a version that includes a fix for this issue, as using an older version may allow unauthorized users to take control of blogs.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-269: Improper Privilege Management
Related identifiers
CVE-2017-7489
GHSA-M34M-FGH4-V7CX
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com