CVE-2024-25982
Msa-24-0005: csrf risk in language import utility
Résumé
Msa-24-0005: csrf risk in language import utility
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.9"},{"introduced":"4.2.0"},{"fixed":"4.2.6"},{"introduced":"4.3.0"},{"fixed":"4.3.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web lists.fedoraproject.org
- web moodle.org
- web git.moodle.org