CVE-2024-38277 Information

Description

A unique key should be generated for a user’s QR login key and their auto-login key so the same key cannot be used interchangeably between the two.

Reference

https://moodle.org/mod/forum/discuss.php?d=459502