CVE:CVE-2021-43559
CNNVD:CNNVD-202111-1275
Moodle是一套免费、开源的电子学习软件平台，也称课程管理系统、学习管理系统或虚拟学习环境。
Moodle 存在跨站请求伪造漏洞，该漏洞源于“delete related badge”功能缺少对于防范CSRF风险的令牌校验，这可能导致跨站请求伪造攻击。
solution:Upgrade moodle moodle to a higher version than 3.8.8,3.9.11,3.10.8,3.11.4,and avoid the version (,3.8.8],[3.9.0,3.9.11),[3.10.0,3.10.8),[3.11.0,3.11.4); Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35