Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-38276

moodle: CSRF risks due to misuse of confirm_sesskey

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

Incorrect CSRF token checks resulted in multiple CSRF risks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moodle Moodle

Default version status: unaffected

  • 4.4affected
  • 4.3 to ≤ 4.3.4affected
  • 4.2 to ≤ 4.2.7affected
  • 4.1 to ≤ 4.1.10affected

References