Lucene search

K
osvGoogleOSV:CVE-2021-43559
HistoryNov 22, 2021 - 4:15 p.m.

CVE-2021-43559

2021-11-2216:15:08
Google
osv.dev
8
moodle
csrf risk
delete badge

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

31.5%

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The “delete related badge” functionality did not include the necessary token check to prevent a CSRF risk.

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

31.5%