Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-25982

Опубликовано: 19 фев. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 8.8

Описание

The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

Показывать по

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.

CVSS3: 8.8
debian
больше 2 лет назад

The link to update all installed language packs did not include the ne ...

CVSS3: 8.8
github
больше 2 лет назад

Cross-Site Request Forgery in moodle

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-8851: package `moodle` update to version 4.3.5-alt1

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-9067: package `moodle` update to version 4.3.5-alt1

8.8 High

CVSS3