CVE-2024-25982
EUVD-2024-056019.02.2024, 17:15
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 4.1.0 ≤ 𝑥 < 4.1.9 |
| moodle | moodle | 4.2.0 ≤ 𝑥 < 4.2.6 |
| moodle | moodle | 4.3.0 ≤ 𝑥 < 4.3.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References