Lucene search
Veracode Vulnerability DatabaseVERACODE:33074HistoryNov 23, 2021 - 10:49 a.m.
Cross-Site Request Forgery (CSRF)
2021-11-2310:49:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
moodle
csrf
vulnerability
unauthenticated
deletions
EPSS
0.001
Percentile
31.5%
Moodle is vulnerable to cross-site request forgery attacks. The vulnerability exists because the remove option of the action related badges isn’t properly validated with an sesskey when removing the related action badges which allows an attacker to perform unauthenticated deletions of the action related badges.
Related
cve
cve
CVE-2021-43559
2021-11-22 16:15:08
prion
prion
Cross site request forgery (csrf)
2021-11-22 16:15:00
cvelist
cvelist
CVE-2021-43559
2021-11-22 16:00:05
osv
osv
BIT-moodle-2021-43559
2024-03-06 11:06:35
CVE-2021-43559
2021-11-22 16:15:08
Moodle contains CSRF vulnerability
2022-05-24 19:21:11
cnvd
cnvd
Moodle Cross-Site Request Forgery Vulnerability (CNVD-2021-92541)
2021-11-17 00:00:00
ubuntucve
ubuntucve
CVE-2021-43559
2021-11-22 00:00:00
github
github
Moodle contains CSRF vulnerability
2022-05-24 19:21:11
nvd
nvd
CVE-2021-43559
2021-11-22 16:15:08
nessus
nessus
Moodle 3.11.x < 3.11.4 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.11 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.10.x < 3.10.8 Multiple Vulnerabilities
2023-02-20 00:00:00
openvas
openvas
Moodle < 3.9.11, 3.10.x < 3.10.8, 3.11.x < 3.11.4 Multiple Vulnerabilities
2021-11-23 00:00:00