~ / search / GHSA-xjr3-fwp9-9g96

GHSA-xjr3-fwp9-9g96

Moodle Cross-Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) High CVE-2022-2986

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.11, < 3.11.9 3.11.9
Packagist moodle/moodle >= 4.0, < 4.0.3 4.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.

References

External links from the advisory. They lead to third-party sites.