CVE-2024-34001 moodle: CSRF risk in admin preset tool management of presets

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk...

CVE-2024-34001

The Moodle virtual learning environment is vulnerable to a Cross-Site Request Forgery (CSRF) risk. The root cause is that actions within the admin preset tool for managing presets do not include the necessary security tokens. This vulnerability affects Moodle versions prior to 4.1.10 , 4.2.7 (in ...