Lucene search
GoogleOSV:GHSA-8G5H-GJWQ-W5CHHistoryMay 31, 2024 - 9:30 p.m.
Moodle Logout CSRF in admin/tool/mfa/auth.php
2024-05-3121:30:55
Google
osv.dev
1
moodle
logout
csrf
admin tool
mfa
risk
software
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | eq | 4.3.3 | |
| moodle/moodle | eq | 4.3.1 | |
| moodle/moodle | eq | 4.3.2 | |
| moodle/moodle | eq | 4.3.0 |
Related
cvelist
cvelist
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
2024-05-31 20:40:23
nvd
nvd
CVE-2024-34007
2024-05-31 21:15:09
veracode
veracode
Cross-site Request Forgery (CSRF)
2024-06-07 08:00:39
cve
cve
CVE-2024-34007
2024-05-31 21:15:09
github
github
Moodle Logout CSRF in admin/tool/mfa/auth.php
2024-05-31 21:30:55
vulnrichment
vulnrichment
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
2024-05-31 20:40:23
ubuntucve
ubuntucve
CVE-2024-34007
2024-05-31 00:00:00
openvas
openvas
Moodle 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00