CVE-2024-34008
moodle: CSRF risk in analytics management of models
Summary
moodle: CSRF risk in analytics management of models
Original description
The description as published by the source.
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.3.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org