CVE-2023-28335

Опубликовано: 23 мар. 2023

Источник: debian

EPSS Низкий

Описание

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

Пакет	Статус	Версия исправления	Релиз	Тип
moodle	removed			package

EPSS

Процентиль: 53%

0.00303

Низкий

CVE-2023-28335

CVSS3: 8.8

ubuntu

около 2 лет назад

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

CVE-2023-28335

CVSS3: 8.8

nvd

около 2 лет назад

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

GHSA-wxmq-v9gx-75pg

CVSS3: 8.8

github

около 2 лет назад

Moodle vulnerable to Cross-site Request Forgery

EPSS

Процентиль: 53%

0.00303

Низкий