CVE-2024-34007
moodle: logout CSRF in admin/tool/mfa/auth.php
Summary
moodle: logout CSRF in admin/tool/mfa/auth.php
Original description
The description as published by the source.
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org