← Volver a CVEs
CVE-2024-34007
HIGH8.8
Descripcion
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Detalles CVE
Puntuacion CVSS v3.18.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado5/31/2024
Ultima modificacion5/30/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
moodle:moodle
Debilidades (CWE)
CWE-352CWE-352
Referencias
https://moodle.org/mod/forum/discuss.php?d=458396(patrick@puiterwijk.org)
https://moodle.org/mod/forum/discuss.php?d=458396(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.