GHSA-xpfv-89vg-r562HighCVSS 8.8

Cross Site Request Forgery in Moodle

Published
January 28, 2022
Last Modified
September 13, 2023

🔗 CVE IDs covered (1)

CVE-2022-0335 →

📋 Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.11, < 3.11.5
  • composer/moodle/moodle:>= 3.10, < 3.10.8
  • composer/moodle/moodle:>= 3.9, < 3.9.11

🔗 References (5)