CVE-2022-0335
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" fu...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.10"},{"introduced":"3.9.0"},{"fixed":"3.9.12"},{"introduced":"3.10.0"},{"fixed":"3.10.9"},{"introduced":"3.11.0"},{"fixed":"3.11.5"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org