Cross-site Request Forgery (CSRF)

2024-06-0707:10:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site request forgery

csrf

moodle

vulnerability

admin management

analytics models

token

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

moodle/moodle is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability is due to the admin management of analytics models, which fails to prevent CSRF risks because it does not include the necessary token.

CPENameOperatorVersion
moodle/moodlelev4.3.3
moodle/moodlelev4.1.9
moodle/moodlelev4.2.6
moodle/moodlelev4.3.3
moodle/moodlelev4.1.9
moodle/moodlelev4.2.6