The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
| Software | From | Fixed in |
|---|---|---|
moodle / moodle
|
4.3.0 | 4.3.4 |