Azienda Sicura

Lista CVE 2024/34xxx

CVE-2024-34001 (moodle: stored XSS in lesson overview report via user ID number)

CVE-2024-34002 (moodle: CSRF risk in admin preset tool management of presets)

CVE-2024-34003 (moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup)

CVE-2024-34004 (moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup)

CVE-2024-34005 (moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup)

CVE-2024-34006 (moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup)

CVE-2024-34007 (moodle: unsanitized HTML in site log for config_log_created)

CVE-2024-34008 (moodle: logout CSRF in admin/tool/mfa/auth.php)

CVE-2024-34009 (moodle: CSRF risk in analytics management of models)

CVE-2024-34010 (moodle: ReCAPTCHA can be bypassed on the login page)