Vulnerability CVE-2022-2986
Published: 2022-10-06

Description:
Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.

 References:
https://bugzilla.redhat.com/show_bug.cgi?id=2121360
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75326
Copyright 2026, cxsecurity.com

 

Back to Top