Description

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.

Remediation

References

CVE-2024-43434

Related Vulnerabilities

WordPress Plugin Realteo Multiple Vulnerabilities (1.2.3)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4306)

PHP Other Vulnerability (CVE-2000-0967)

MySQL CVE-2024-21127 Vulnerability (CVE-2024-21127)

Oracle Application Server Other Vulnerability (CVE-2007-0286)

Severity

High

Classification

CVE-2024-43434 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities