CVE-2024-34001
moodle: CSRF risk in admin preset tool management of presets
Résumé
moodle: CSRF risk in admin preset tool management of presets
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.10"},{"introduced":"4.2.0"},{"fixed":"4.2.7"},{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org