CVE-2024-34001: Moodle CSRF risk in admin preset tool management of presets

May 31, 2024 (updated June 4, 2024)

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

References

github.com/advisories/GHSA-gq9f-8rj4-w7jc
github.com/moodle/moodle
moodle.org/mod/forum/discuss.php?d=458389
nvd.nist.gov/vuln/detail/CVE-2024-34001

Detect and mitigate CVE-2024-34001 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →