Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2022-2986 - Vulnerability Database

Moodle Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2022-2986

High

Reference: CVE-2022-2986

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-2986

Title: Moodle Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.