CVE-2024-34009

Published: May 31, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.

Affected (1)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	From 4.3.0 to 4.3.4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://moodle.org/mod/forum/discuss.php?d=458398

Source: patrick@puiterwijk.org

Vendor Advisory

https://moodle.org/mod/forum/discuss.php?d=458398

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.