5 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-34007
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF. CVE-2024-34007 Note that...
CVE-2024-34007
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF...
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF...
CVE-2024-34007
The Moodle virtual learning environment is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the MFA component, specifically within the admin/tool/mfa/auth.php file. The vulnerability exists because the logout option within MFA fails to include a necessary security token, potentially allo...
