Moodle Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2024-43434 - Vulnerability Database
Moodle Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2024-43434
High
Reference:
CVE-2024-43434
Title:
Moodle Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:
The bulk message sending feature in Moodle39s Feedback module39s non-respondents report had an incorrect CSRF token check leading to a CSRF vulnerability.