Search for vulnerabilities
Vulnerability details: VCID-3dhp-9jkf-qudf
Vulnerability ID VCID-3dhp-9jkf-qudf
Aliases CVE-2024-34007
GHSA-8g5h-gjwq-w5ch
Summary Moodle Logout CSRF in admin/tool/mfa/auth.php The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80877
epss 0.00708 https://api.first.org/data/v1/epss?cve=CVE-2024-34007
epss 0.00708 https://api.first.org/data/v1/epss?cve=CVE-2024-34007
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-8g5h-gjwq-w5ch
generic_textual MODERATE https://github.com/moodle/moodle
cvssv3.1 8.8 https://moodle.org/mod/forum/discuss.php?d=458396
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=458396
ssvc Track https://moodle.org/mod/forum/discuss.php?d=458396
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2024-34007
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80877
https://api.first.org/data/v1/epss?cve=CVE-2024-34007
https://github.com/moodle/moodle
https://moodle.org/mod/forum/discuss.php?d=458396
https://nvd.nist.gov/vuln/detail/CVE-2024-34007
GHSA-8g5h-gjwq-w5ch https://github.com/advisories/GHSA-8g5h-gjwq-w5ch
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://moodle.org/mod/forum/discuss.php?d=458396
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-21T19:13:49Z/ Found at https://moodle.org/mod/forum/discuss.php?d=458396
Exploit Prediction Scoring System (EPSS)
Percentile 0.71207
EPSS Score 0.00708
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:11:31.160860+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-8g5h-gjwq-w5ch/GHSA-8g5h-gjwq-w5ch.json 36.1.3