Lucene search

Veracode Vulnerability DatabaseVERACODE:47407

HistoryJun 07, 2024 - 6:55 a.m.

Improper Input Validation

2024-06-0706:55:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

moodle

vulnerability

improper input validation

recaptcha

activation

bypass

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

moodle/moodle is vulnerable to Improper Input Validation. The vulnerability is due to inadequate verification of ReCAPTCHA activation on the login page, which results in captcha bypass.

CPENameOperatorVersion
moodle/moodlelev4.3.3
moodle/moodlelev4.3.3

CPE	Name	Operator	Version
	moodle/moodle	le	v4.3.3
	moodle/moodle	le	v4.3.3

References

github.com/advisories/GHSA-gwf6-q6c2-94p3

moodle.org/mod/forum/discuss.php?d=458398