Threats tagged 'bit-moodle-2024-34007'

A Cross-Site Request Forgery (CSRF) vulnerability exists in the logout option within the Multi-Factor Authentication (MFA) component of Moodle. Specifically, the logout function in admin/tool/mfa/auth.php lacks the necessary CSRF token, which could allow users to be logged out unintentionally via CSRF attacks. This affects Moodle versions from 4.3.0 up to but not including 4.3.4. A patch is available to address this issue.