Lucene search
Veracode Vulnerability DatabaseVERACODE:47415HistoryJun 07, 2024 - 8:00 a.m.
Cross-site Request Forgery (CSRF)
2024-06-0708:00:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
cross-site request forgery
csrf
moodle
moodle/moodle is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability is due to the logout option lacking the necessary token, risking users being inadvertently logged out via CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v4.3.3 | |
| moodle/moodle | le | v4.3.3 |
Related
cvelist
cvelist
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
2024-05-31 20:40:23
osv
osv
Moodle Logout CSRF in admin/tool/mfa/auth.php
2024-05-31 21:30:55
nvd
nvd
CVE-2024-34007
2024-05-31 21:15:09
cve
cve
CVE-2024-34007
2024-05-31 21:15:09
github
github
Moodle Logout CSRF in admin/tool/mfa/auth.php
2024-05-31 21:30:55
vulnrichment
vulnrichment
CVE-2024-34007 moodle: logout CSRF in admin/tool/mfa/auth.php
2024-05-31 20:40:23
ubuntucve
ubuntucve
CVE-2024-34007
2024-05-31 00:00:00
openvas
openvas
Moodle 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00