CVE-2021-43559

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-43559
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-43559.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-43559
Aliases
Related
Withdrawn
2024-05-08T06:51:39.888084Z
Published
2021-11-22T16:15:08Z
Modified
2023-12-06T00:46:38.061296Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality did not include the necessary token check to prevent a CSRF risk.

References

Affected packages

Git / github.com/moodle/moodle

Affected versions

v3.*

v3.11.0
v3.11.1
v3.11.2
v3.11.3