CVE-2015-1583

Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers...

8.8 High

CVE-2015-1583 is a high vulnerability (CVSS 8.8) in Atutor, published March 2, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. No source names a fixed version.

Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.22%Down 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 8.8

Record: CVE-2015-1583
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-1583
Updated: 2026-11-02

EUVDEUVD-2015-1715 No score

Record: EUVD-2015-1715
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r9f5-9xmp-7m8w No score

Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers...

Record: GHSA-r9f5-9xmp-7m8w
Updated: 2026-11-02

Affected products

atutor

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD