PT-2024-25637 · Google+2 · Recaptcha+2

Caglaroflazoglu · Published 2024-05-31 · Updated 2025-05-31 · CVE-2024-34009

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue is related to insufficient checks for ReCAPTCHA enablement, allowing bypass of checks on the login page. This issue does not affect other pages where ReCAPTCHA is used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2024-8851

ALT-PU-2024-9067

BIT-MOODLE-2024-34009

CVE-2024-34009

GHSA-GWF6-Q6C2-94P3

Affected Products

Alt Linux

Red Os

Recaptcha

References · 15

• https://moodle.org/mod/forum/discuss.php?d=458398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34009 · Security Note
• https://osv.dev/vulnerability/GHSA-gwf6-q6c2-94p3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-34009 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-34009 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-34009 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/707899 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34009 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2024-34009 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://t.me/cvenotify/88247 · Telegram Post
• https://t.me/cvenotify/81671 · Telegram Post
• https://t.me/cvenotify/81789 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-moodle-01-07-24 · Note
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81463 · Note