Lucene search
GitHub Advisory DatabaseGHSA-GQ9F-8RJ4-W7JCHistoryMay 31, 2024 - 9:30 p.m.
Moodle CSRF risk in admin preset tool management of presets
2024-05-3121:30:54
CWE-352
GitHub Advisory Database
github.com
4
moodle
csrf
admin
preset
tool
management
token
risk
software
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
Affected configurations
Node
moodlemoodleRange<4.1.10
ORmoodlemoodleRange<4.2.7
ORmoodlemoodleRange<4.3.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | lt | 4.1.10 | |
| moodle/moodle | lt | 4.2.7 | |
| moodle/moodle | lt | 4.3.4 |
Related
veracode
veracode
Cross-site Request Forgery (CSRF)
2024-06-07 06:44:43
ubuntucve
ubuntucve
CVE-2024-34001
2024-05-31 00:00:00
osv
osv
Moodle CSRF risk in admin preset tool management of presets
2024-05-31 21:30:54
nvd
nvd
CVE-2024-34001
2024-05-31 20:15:10
cvelist
cvelist
CVE-2024-34001 moodle: CSRF risk in admin preset tool management of presets
2024-05-31 20:06:48
cve
cve
CVE-2024-34001
2024-05-31 20:15:10
vulnrichment
vulnrichment
CVE-2024-34001 moodle: CSRF risk in admin preset tool management of presets
2024-05-31 20:06:48
openvas
openvas
Moodle < 4.1.10, 4.2.x < 4.2.7, 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00