cbcvebase.
CVE-2024-38277
published 2024-06-18

CVE-2024-38277: A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

PriorityP426medium5.4CVSS 3.1
AVNACLPRLUINSUCLILAN
EPSS
0.24%
15.5th percentile
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

Affected

14 ranges
VendorProductVersion rangeFixed in
fedoraprojectfedora——
fedoraprojectfedora——
moodlemoodle——
moodlemoodle——
moodlemoodle>= 0 < 4.1.114.1.11
moodlemoodle4.1 – 4.1.10—
moodlemoodle>= 4.1.0 < 4.1.114.1.11
moodlemoodle4.2 – 4.2.7—
moodlemoodle>= 4.2.0 < 4.2.84.2.8
moodlemoodle>= 4.2.0-beta < 4.2.84.2.8
moodlemoodle4.3 – 4.3.4—
moodlemoodle>= 4.3.0 < 4.3.54.3.5
moodlemoodle>= 4.3.0-beta < 4.3.54.3.5
moodlemoodle>= 4.4.0-beta < 4.4.14.4.1
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.