moodle: CSRF risk in admin preset tool management of presets (CVE-2024-34001)

Résumé

moodle: CSRF risk in admin preset tool management of presets

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]

Références

advisory moodle.org
web nvd.nist.gov