← Database

CVE-2024-43434

HIGH CVSS: 8.1 Published: 2024-11-07 Modified: 2026-06-17

Description

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.

Affected Platforms

Moodle Moodle

Weakness Type

CWE-22

References