Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-34007

moodle: logout CSRF in admin/tool/mfa/auth.php

Description

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moodle

Default version status: unknown

  • 4.3 to ≤ 4.3.3affected

References