Описание
Moodle has CSRF risk in Feedback non-respondents report
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
Пакеты
moodle/moodle
< 4.1.12
4.1.12
moodle/moodle
>= 4.2.0-beta, < 4.2.9
4.2.9
moodle/moodle
>= 4.3.0-beta, < 4.3.6
4.3.6
moodle/moodle
>= 4.4.0-beta, < 4.4.2
4.4.2
Связанные уязвимости
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
The bulk message sending feature in Moodle's Feedback module's non-res ...
Уязвимость виртуальной обучающей среды Moodle, связанная с подделкой межсайтовых запросов, позволяющая нарушителю осуществить CSRF-атаку
