{"id":"CVE-2016-2157","aliases":["GHSA-f5pm-c4cw-563p"],"url":"https://o3.security/vulnerability/CVE-2016-2157","summary":"Moodle cross-site request forgery (CSRF) vulnerability","details":"Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage Assignment plugins.","published":"2016-05-22T20:59:06.270Z","modified":"2026-10-24T10:30:41.026767816Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.7.13"},{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.8.11"},{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"2.9.5"},{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"3.0.3"}],"fix":{"url":"https://github.com/moodle/moodle/commit/01b19e761f94a4f3615d5c8f6314309aa83469f3","label":"moodle/moodle@01b19e7"},"references":[{"type":"WEB","url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53031"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2016/03/21/1"},{"type":"WEB","url":"http://www.securitytracker.com/id/1035333"},{"type":"ADVISORY","url":"https://moodle.org/mod/forum/discuss.php?d=330179"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2157"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/01b19e761f94a4f3615d5c8f6314309aa83469f3"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/1452f1e1d37d816648e3e015296de59509847287"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/55ba3a26d2710ce3c5f13287b0c3538b9a934fa4"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/85984545a937b0790c355473d7295eb60b0265eb"},{"type":"WEB","url":"https://github.com/moodle/moodle/commit/a0cd21cd5cc63961243518a58e9d5d01182dbbb4"},{"type":"PACKAGE","url":"https://github.com/moodle/moodle"},{"type":"WEB","url":"https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-24T10:30:41.026767816Z"}}