Threats tagged 'bit-moodle-2024-34008'

A Cross-Site Request Forgery (CSRF) vulnerability exists in the admin management of analytics models in Moodle. The affected actions lack the necessary CSRF token protection, allowing unauthorized commands to be potentially executed by an attacker. This vulnerability affects Moodle versions from 4.0.0 up to but not including 4.3.4. A patch is available to address this issue.