The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://moodle.org/mod/forum/discuss.php?d=458396 |
Configurations
No configuration.
History
No history.
Information
Published : 2024-05-31 21:15
Updated : 2024-06-03 14:46
NVD link : CVE-2024-34007
Mitre link : CVE-2024-34007
CVE.ORG link : CVE-2024-34007
JSON object : View
Products Affected
No product.
CWE
CWE-352
Cross-Site Request Forgery (CSRF)