Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-1454

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00361EPSS
Exploits0References4
OSV
OSV
added 2024/07/19 7:25 a.m.11 views

BIT-MOODLE-2024-34008 moodle: CSRF risk in analytics management of models

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

8.8CVSS8.5AI score0.00361EPSS
Exploits0References2
Veracode
Veracode
added 2024/06/07 7:10 a.m.11 views

Cross-site Request Forgery (CSRF)

moodle/moodle is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the admin management of analytics models, which fails to prevent CSRF risks because it does not include the necessary token...

8.8CVSS6.4AI score0.00361EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/05/31 9:15 p.m.8 views

CVE-2024-34008

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

8.8CVSS8.6AI score
Exploits0References1
NVD
NVD
added 2024/05/31 9:15 p.m.15 views

CVE-2024-34008

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

8.8CVSS6.4AI score0.00361EPSS
Exploits0References1
OSV
OSV
added 2024/05/31 9:15 p.m.0 views

UBUNTU-CVE-2024-34008

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

8.8CVSS5.8AI score0.00361EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/05/31 9:15 p.m.15 views

CVE-2024-34008

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk...

8.8CVSS7.2AI score0.00361EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/05/31 12:0 a.m.1 views

PT-2024-25636 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue concerns a CSRF risk in the admin management of analytics models due to the lack of a necessary token. This could allow unauthorized actions on behalf of users. Recommendations: At...

9.8CVSS5.5AI score0.01399EPSS
Exploits1References49
Rows per page
Query Builder