CVE-2021-43559: CSRF
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality did not include the necessary token check to prevent a CSRF risk.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-43559?
CVE-2021-43559 is a vulnerability found in Moodle versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10, and earlier unsupported versions.
What is the severity of CVE-2021-43559?
CVE-2021-43559 has a severity level of high (8.8).
How does CVE-2021-43559 impact Moodle?
CVE-2021-43559 poses a CSRF (Cross-Site Request Forgery) risk to Moodle, specifically in the "delete related badge" functionality.
Which versions of Moodle are affected by CVE-2021-43559?
CVE-2021-43559 affects Moodle versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10, and earlier unsupported versions.
How can I fix CVE-2021-43559 in Moodle?
To fix CVE-2021-43559, it is recommended to upgrade Moodle to the latest supported version and apply any available patches or hotfixes provided by the Moodle project.