← back
CVE-2024-34009

moodle: ReCAPTCHA can be bypassed on the login page

CVSS 7.5 HIGHEPSS 0.4%CWE-20
Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Moodle

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://moodle.org/mod/forum/discuss.php?d=458398