CVE-2021-43559

2021-11-2216:00:05

CWE-352

fedora

www.cve.org

moodle

csrf

risk

delete

badge

functionality

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

31.5%

JSON

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The “delete related badge” functionality did not include the necessary token check to prevent a CSRF risk.

CNA Affected

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "moodle 3.11.4, moodle 3.10.8 and moodle 3.9.11"
      }
    ]
  }
]