https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:15:01.706847+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-moodle-2024-34007 BIT-moodle-2024-34007 — moodle: logout CSRF in admin/tool/mfa/auth.php 2026-10-03T17:15:01.711121+00:00

Affected: Bitnami: moodle

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0388 certfr-2024-avi-0388 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une injection… 2026-10-03T17:15:01.711169+00:00 certfr-2024-avi-0388 https://cve.radiocsirt.org/vuln/euvd-2026-203457 EUVD-2026-203457 2026-10-03T17:15:01.711189+00:00 EUVD-2026-203457 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34007 fkie_cve-2024-34007 2026-10-03T17:15:01.711203+00:00

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

 https://cve.radiocsirt.org/vuln/ghsa-8g5h-gjwq-w5ch GHSA-8g5h-gjwq-w5ch — Moodle Logout CSRF in admin/tool/mfa/auth.php 2026-10-03T17:15:01.711238+00:00

Affected: Packagist: moodle/moodle

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-34007 UBUNTU-CVE-2024-34007 2026-10-03T17:15:01.711259+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1096 WID-SEC-W-2024-1096 — Moodle: Mehrere Schwachstellen 2026-10-03T17:15:01.711278+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Code auszuführen, ReCAPTCHA zu umgehen, vertrauliche Informationen offenzulegen oder einen Cross-Site Scripting (XSS)-Angriff durchzuführen.