Moodle has CSRF risk in Feedback non-respondents report

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...

CVE-2024-43434

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...

CVE-2024-43434

CVE-2024-43434 describes a CSRF vulnerability in Moodle’s Feedback module non-respondents report caused by an incorrect CSRF token check. The issue is supported by multiple sources in the connected documents (NVD entry with CVSS 3.1 score 8.1; related advisories). The exact affected Moodle versio...

Moodle 安全漏洞

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site request forgery vulnerability that stems from the presence of incorrect CSRF token checks in...