Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://moodle.org/mod/forum/discuss.php?d=458389 |
Configurations
No configuration.
History
03 Jun 2024, 14:46
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
31 May 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-31 20:15
Updated : 2024-06-03 14:46
NVD link : CVE-2024-34001
Mitre link : CVE-2024-34001
CVE.ORG link : CVE-2024-34001
JSON object : View
Products Affected
No product.
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
