vulnerability

Moodle: Cross-Site Request Forgery (CSRF) (CVE-2024-34001)

Try Surface Command

Severity

8

CVSS

(AV:N/AC:M/Au:M/C:C/I:C/A:C)

Published

May 31, 2024

Added

Jun 3, 2025

Modified

May 7, 2026

Description

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

Solution

moodle-upgrade-latest

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.