-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moodle/moodle | composer | >= 4.3.0, < 4.3.4 | 4.3.4 |
| moodle/moodle | composer | >= 4.2.0, < 4.2.7 | 4.2.7 |
| moodle/moodle | composer | < 4.1.10 | 4.1.10 |
The vulnerable functions are likely those that handle actions in the admin preset tool. The exact function names are inferred based on the typical functions involved in such actions and the need for CSRF token validation. The Moodle security advisory and GitHub Advisory Database provided context for understanding the nature of the vulnerability.