Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-38277

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

Published

2024-06-18T20:15:14.210

Last Modified

2025-08-07T17:24:28.743

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-324
  • Type: Secondary
    CWE-326
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 4.1.11 Yes
Application moodle moodle < 4.2.8 Yes
Application moodle moodle < 4.3.5 Yes
Application moodle moodle 4.4.0 Yes
Operating System fedoraproject fedora 39 Yes
Operating System fedoraproject fedora 40 Yes
References