Moodle CSRF risk in admin preset tool management of presets · CVE-2024-34001 · GitHub Advisory Database · GitHub

Moodle CSRF risk in admin preset tool management of presets

Moderate severity GitHub Reviewed Published May 31, 2024 to the GitHub Advisory Database • Updated Jun 4, 2024

Package

moodle/moodle (Composer)

Affected versions

>= 4.3.0, < 4.3.4

>= 4.2.0, < 4.2.7

< 4.1.10

Patched versions

4.3.4

4.2.7

4.1.10

Description

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

References

Published by the National Vulnerability Database

May 31, 2024

Published to the GitHub Advisory Database May 31, 2024

Reviewed Jun 4, 2024

Last updated Jun 4, 2024