CVE-2021-43559
Fixed upstream EPSS <1%
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality did not include the necessary token check to prevent a CSRF risk.
Products: moodle, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | moodle/moodle | 3.11.4 |
| Packagist | moodle/moodle | 3.10.8 |
| Packagist | moodle/moodle | 3.9.11 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | moodle | no fix |
| Ubuntu Pro 18.04 LTS | moodle | no fix |