CVE-2022-0335

Published: 2022-01-25T20:15Z

Last Modified: 2024-11-21T06:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt