Moodle Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2024-43434 - Vulnerability Database

Moodle Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2024-43434

High
Reference: CVE-2024-43434
Title: Moodle Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:

The bulk message sending feature in Moodle39s Feedback module39s non-respondents report had an incorrect CSRF token check leading to a CSRF vulnerability.