Описание
A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| moodle | removed | package |
EPSS
Процентиль: 4%
0.00022
Низкий
Связанные уязвимости
CVSS3: 8.8
ubuntu
3 месяца назад
A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
CVSS3: 8.8
nvd
3 месяца назад
A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
github
3 месяца назад
Moodle has a CSRF risk in Brickfield tool's analysis request action
CVSS3: 3.5
fstec
3 месяца назад
Уязвимость компонента Brickfield виртуальной обучающей среды Moodle, позволяющая нарушителю оказать влияние на целостность защищаемой информации
EPSS
Процентиль: 4%
0.00022
Низкий