CVE-2024-34007

Опубликовано: 31 мая 2024

Источник: debian

EPSS Низкий

Описание

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

Пакет	Статус	Версия исправления	Релиз	Тип
moodle	removed			package

EPSS

Процентиль: 24%

0.00314

Низкий

CVE-2024-34007

CVSS3: 8.8

ubuntu

около 2 лет назад

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

CVE-2024-34007

CVSS3: 8.8

nvd

около 2 лет назад

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

GHSA-8g5h-gjwq-w5ch

github

около 2 лет назад

Moodle Logout CSRF in admin/tool/mfa/auth.php

ROS-20240701-03

CVSS3: 7.4

redos

около 2 лет назад

Множественные уязвимости moodle

EPSS

Процентиль: 24%

0.00314

Низкий