| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 4.2.0-beta, < 4.2.9≥ 4.3.0-beta, < 4.3.6≥ 4.4.0-beta, < 4.4.2< 4.1.12 | 4.2.94.3.64.4.24.1.12 |
| moodle | ≥ 4.2.0, < 4.2.9≥ 4.3.0, < 4.3.6≥ 4.4.0, < 4.4.2< 4.1.12 | 4.2.94.3.64.4.24.1.12 |
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free