description: Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.
problem types: CSRF
affected:
{
vendor: n/a
product: moodle
versions:
version: moodle 4.0.3 and moodle 3.11.9, status: affected
}