GHSA-3hmr-948v-5qgqMediumCVSS 4.3

Moodle Cross-Site Request Forgery (CSRF)

Published
May 17, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2017-7491 →

📋 Description

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.

🎯 Affected products4

  • composer/moodle/moodle:>= 3.2, < 3.2.3
  • composer/moodle/moodle:>= 3.1, < 3.1.6
  • composer/moodle/moodle:>= 3.0, < 3.0.10
  • composer/moodle/moodle:>= 2.7, < 2.7.20

🔗 References (3)