Lucene search
GitHub Advisory DatabaseGHSA-8G5H-GJWQ-W5CHHistoryMay 31, 2024 - 9:30 p.m.
Moodle Logout CSRF in admin/tool/mfa/auth.php
2024-05-3121:30:55
CWE-352
GitHub Advisory Database
github.com
2
moodle
mfa
csrf
vulnerability
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Affected configurations
Node
moodlemoodleRange<4.3.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | lt | 4.3.4 |
Related
cvelist
cvelist
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
2024-05-31 20:40:23
osv
osv
Moodle Logout CSRF in admin/tool/mfa/auth.php
2024-05-31 21:30:55
nvd
nvd
CVE-2024-34007
2024-05-31 21:15:09
veracode
veracode
Cross-site Request Forgery (CSRF)
2024-06-07 08:00:39
cve
cve
CVE-2024-34007
2024-05-31 21:15:09
vulnrichment
vulnrichment
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
2024-05-31 20:40:23
ubuntucve
ubuntucve
CVE-2024-34007
2024-05-31 00:00:00
openvas
openvas
Moodle 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00