GHSA-8g5h-gjwq-w5chMedium

Moodle Logout CSRF in admin/tool/mfa/auth.php

Published
May 31, 2024
Last Modified
June 4, 2024

🔗 CVE IDs covered (1)

CVE-2024-34007 →

📋 Description

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

🎯 Affected products1

  • composer/moodle/moodle:>= 4.3.0, < 4.3.4

🔗 References (4)