vulnerability

Moodle: Cross-Site Request Forgery (CSRF) (CVE-2024-34008)

Try Surface Command
Back to search
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
May 31, 2024
Added
Jul 22, 2024
Modified
Jan 28, 2025

Description

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.

Solution(s)

moodle-upgrade-4_1_10moodle-upgrade-4_2_7moodle-upgrade-4_3_4

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today