Lucene search

K
githubGitHub Advisory DatabaseGHSA-GWF6-Q6C2-94P3
HistoryMay 31, 2024 - 9:30 p.m.

Moodle ReCAPTCHA can be bypassed on the login page

2024-05-3121:30:55
CWE-20
GitHub Advisory Database
github.com
1
moodle
recaptcha
bypass
vulnerability
login page
insufficient checks
software

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.

Affected configurations

Vulners
Node
moodlemoodleRange<4.3.4
CPENameOperatorVersion
moodle/moodlelt4.3.4

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%