CVE-2024-34001CWE-352

moodle: CSRF risk in admin preset tool management of presets

High · published May 31, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-05-31T20:06Z
EPSS history
Timeline
  • 31 MAY 20:06Z
    moodle: CSRF risk in admin preset tool management of presets
    cvelistv5