CVE-2024-34001: Moodle CSRF risk in admin preset tool management of presets

May 31, 2024 (updated May 15, 2025)

Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.

References

github.com/advisories/GHSA-gq9f-8rj4-w7jc
github.com/moodle/moodle
github.com/moodle/moodle/commit/03e93da556201291e4a345d353a06d08d5d04dd6
moodle.org/mod/forum/discuss.php?d=458389
nvd.nist.gov/vuln/detail/CVE-2024-34001

Code Behaviors & Features

Detect and mitigate CVE-2024-34001 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →