Vulnerability Database
Blog
FAQ
Docs
CVE-2024-38276
See a problem?
Please try reporting it
to the source
first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-38276
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38276.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38276
Aliases
BIT-moodle-2024-38276
GHSA-356g-7x36-7m34
Related
UBUNTU-CVE-2024-38276
Published
2024-06-18T20:15:14Z
Modified
2024-10-08T04:17:21.148561Z
Severity
8.8 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
Incorrect CSRF token checks resulted in multiple CSRF risks.
References
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
https://moodle.org/mod/forum/discuss.php?d=459501
Affected packages
Git
/
github.com/moodle/moodle
Affected ranges
Type
GIT
Repo
https://github.com/moodle/moodle
Events
Introduced
ae4efa96ee8169a848c141ad21690165ea791552
Fixed
2d41ac46f45d49872db03db14ea3cfda1152c62c
Affected versions
v4.*
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
CVE-2024-38276 - OSV