Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.

Remediation

References

CVE-2022-0335

Related Vulnerabilities

WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)

WordPress Plugin Copify Cross-Site Request Forgery (1.3.0)

WordPress Plugin WP Print Friendly Cross-Site Scripting (0.6)

WordPress Plugin Ruven Toolkit Cross-Site Scripting (1.1)

Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2022-0335