Description

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.

Remediation

References

CVE-2024-43434

Related Vulnerabilities

WordPress Plugin Telugu Bible Verse Daily Cross-Site Request Forgery (1.0)

WordPress Plugin Scriptless Social Sharing Cross-Site Scripting (3.2.1)

Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-25604)

WordPress Plugin WolfNet IDX for WordPress Multiple Unspecified Vulnerabilities (1.14.7)

PleskWin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-0132)

Severity

High

Classification

CVE-2024-43434 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities