BIT-moodle-2024-34007

vendorUSosv

moodle: logout CSRF in admin/tool/mfa/auth.php

view advisory published 2025-05-31Licence: per source

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-34007US	—	0.35% (29th)	—	2024-05-31
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.