CVE-2024-34009

HIGH

7.5

Beschreibung

Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht5/31/2024

Zuletzt geandert5/30/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

moodle:moodle

Schwachen (CWE)

CWE-20

Referenzen

https://moodle.org/mod/forum/discuss.php?d=458398(patrick@puiterwijk.org)

https://moodle.org/mod/forum/discuss.php?d=458398(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.