CVE-2024-34007 — moodle: logout CSRF in admin/tool/mfa/auth.php
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Published: 2024-05-31 · CVSS: 8.8 · CVSS 3.1
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7