VDB
CVE-2016-2190
CVE-2016-2190
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.
EPSS 0.44% · 63.4th percentile
Risk Scores
CVSS 3.0
5.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.44%
63.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| moodle | moodle | 0, 2.7.0, 2.7.1 |
| moodle | moodle | 2.7.0, 2.8.0, 3.0.0 |
| n/a | n/a | * |
Timeline
- Mar 21, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- [oss-security] 20160321 moodle security release mailing-list
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651 url
- https://moodle.org/mod/forum/discuss.php?d=330181 url
- 1035333 vdb
- https://moodle.org/mod/forum/discuss.php?d=330178 advisory
- https://moodle.org/mod/forum/discuss.php?d=330174 advisory
- https://moodle.org/mod/forum/discuss.php?d=330180 advisory
- https://moodle.org/mod/forum/discuss.php?d=330173 advisory
- https://moodle.org/mod/forum/discuss.php?d=330177 advisory
- https://moodle.org/mod/forum/discuss.php?d=330176 advisory
- https://moodle.org/mod/forum/discuss.php?d=330175 advisory
- https://moodle.org/mod/forum/discuss.php?d=330182 advisory
- https://moodle.org/mod/forum/discuss.php?d=330179 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-2190 advisory
- https://github.com/moodle/moodle/commit/1688564a6eee6000013f6e185f704049283ae375 url
- https://github.com/moodle/moodle/commit/190757854d9ce3b3ce3100dc76de54277f3bdd14 url
- https://github.com/moodle/moodle/commit/314d105c169c67e3ce750f76b21d99983d4a9ff5 url
- https://github.com/moodle/moodle/commit/4d6f159f681882496e05ddacf2561929d2d23f0e url
- https://github.com/moodle/moodle/commit/9f91c23536a31ba2dc91b0ba2ae726b1757a20cb url
- https://github.com/moodle/moodle package
…and 1 more