CVE-2024-34007
moodle: logout CSRF in admin/tool/mfa/auth.php
Résumé
moodle: logout CSRF in admin/tool/mfa/auth.php
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org