CVE-2024-34009
moodle: ReCAPTCHA can be bypassed on the login page
Summary
moodle: ReCAPTCHA can be bypassed on the login page
Original description
The description as published by the source.
Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.3.0"},{"fixed":"4.3.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web moodle.org
- web git.moodle.org