GHSA-m97f-x4mr-4x3qMedium

Moodle vulnerable to Cross-Site Request Forgery

Published
May 13, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2011-4281 →

📋 Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.

🎯 Affected products1

  • composer/moodle/moodle:>= 2.0.0, < 2.0.2

🔗 References (6)