CVE-2024-34009
Fixed upstream EPSS <1%CVSS 7.5
Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.
Products: Moodle
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | moodle/moodle | 4.3.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu:Pro:16.04:LTS | moodle | no fix |
| Ubuntu:Pro:18.04:LTS | moodle | no fix |