CVE-2026-58341

{}

{}

{}

{"bugzilla": {"description": "moodle: CSRF risk in group messaging state toggle", "id": "2494828", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494828"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "status": "draft"}, "cwe": "CWE-22", "details": ["A flaw was found in Moodle. The actions to enable and disable group messaging did not include the necessary token to prevent a Cross-Site Request Forgery (CSRF) risk. A remote attacker could exploit this by tricking an authenticated user into performing unintended actions, potentially leading to unauthorized changes in group messaging settings."], "name": "CVE-2026-58341", "public_date": "2026-07-28T11:04:58Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-58341"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "moodle", "vendor": "moodle"}], "created": "2026-07-28T18:30:04.490176+00:00", "updated": "2026-08-03T08:45:03.263600+00:00", "vendors": ["moodle", "moodle$PRODUCT$moodle"]}