Lucene search

K
osvGoogleOSV:GHSA-9328-7PCW-VW69
HistoryJan 06, 2022 - 6:34 p.m.

Cross-Site Request Forgery in Moodle

2022-01-0618:34:53
Google
osv.dev
14
moodle
version 3.7.2
information exposure
service tokens
enrolled users
course
software

EPSS

0.001

Percentile

21.9%

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.

EPSS

0.001

Percentile

21.9%