Moodle Logout CSRF in admin/tool/mfa/auth.php

높음 8.8CVE-2024-34007 · BIT-moodle-2024-34007 · GHSA-8g5h-gjwq-w5ch · Published 31/05/2024 · updated 17/06/2026

요약

Package	Affected versions	Patched versions
moodle/moodle Packagist	`≥ 4.3.0, < 4.3.4`	`4.3.4`
moodle moodle	`≥ 4.3.0, < 4.3.4`	`4.3.4`

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

NVD description

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 4.3.0, < 4.3.4

4.3.4

≥ 4.3.0, < 4.3.4

4.3.4

moodle/moodle의 다른 취약점

모두 보기 →