GitHub Advisoryadvisory · Packagist

GHSA-gwf6-q6c2-94p3 Moodle ReCAPTCHA can be bypassed on the login page

HIGH Published 2024-05-31 Modified 2024-08-02 Official page ↗

Aliases: CVE-2024-34009
Ecosystem: Packagist
Packages: moodle/moodle
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses: CWE-20
Reviewed: 2024-06-04

Affected packages

• Packagist moodle/moodle: >= 4.3.0, < 4.3.4 → fixed in 4.3.4

Description

Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.

Related

Alias · CVE (1)

CVE-2024-34009 Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. vulnerability

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References