CVE-2014-0010

CVE-2014-0010 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Moodle versions through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, specifically within the user profile management. An unauthenticated attacker could exploit this to hijack an administrator's session and delete categories or fields. The vulnerability has a CVSS score of 6.8, indicating a medium severity with network-based attacks and moderate complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not currently a high-profile threat.