Moodle CSRF risk in analytics management of models
High severity
GitHub Reviewed
Published
May 31, 2024
to the GitHub Advisory Database
•
Updated Jul 18, 2024
Package
Affected versions
>= 4.3.0, < 4.3.4
>= 4.2.0, < 4.2.7
< 4.1.10
Patched versions
4.3.4
4.2.7
4.1.10
Description
Published by the National Vulnerability Database
May 31, 2024
Published to the GitHub Advisory Database
May 31, 2024
Reviewed
Jun 4, 2024
Last updated
Jul 18, 2024
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
References