Description
A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.
Remediation
References
Related Vulnerabilities
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0473)
Moodle Missing Authorization Vulnerability (CVE-2019-10187)
WordPress Plugin WPFront Notification Bar Cross-Site Scripting (1.9.1.04012)
WordPress Plugin Mailster-Email Newsletter for WordPress Cross-Site Scripting (2.4.5.1)
OpenSSL Improper Certificate Validation Vulnerability (CVE-2023-0465)