CVE-2023-28335 (published 2023-03-23T00:00:00)
The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.
Affected products: Vendor: n/a
Product: moodle
Versions: 4.1 to 4.1.1