Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
{ "cpes": [ "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*" ], "severity": "High" }