The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.
| Software | From | Fixed in |
|---|---|---|
moodle / moodle
|
4.1.0 | 4.1.0.x |
moodle / moodle
|
4.1.1 | 4.1.1.x |
moodle / moodle
|
4.1.0 | 4.1.2 |