CVE-2015-1583: Atutor

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.

Affected products

• Atutor Atutor: version 2.2 only

Published 2020-03-02. Last modified 2026-06-17.