NIXPKGS-2026-0042
published on 18 Jan 2026
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package moodle-dl
- @LeSuisse removed maintainer @freezeboy
- @LeSuisse accepted
- @LeSuisse published on GitHub
Moodle: possible to bypass mfa
A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.
Affected products
moodle
- <4.5.7
- <4.4.11
- <5.0.3
Package maintainers
Ignored maintainers (1)
-
@freezeboy freezeboy