Skip to content
OpenAdvisories
Low · 3.1 CVE-2019-14882 EUVD-2022-4534GHSA-m98q-q59p-r9fv

Moodle open redirect vulnerability

Published Mar 18, 2020 · Updated Aug 5, 2024 · Assigned by redhat

Description

A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.

Affected products

VendorProductAffectedFixed
[UNKNOWN] moodle 3.7.3, 3.6.7, 3.5.9 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist moodle/moodle >= 3.5, < 3.5.9 3.5.9 GHSA-m98q-q59p-r9fv
Packagist moodle/moodle >= 3.6, < 3.6.7 3.6.7 GHSA-m98q-q59p-r9fv
Packagist moodle/moodle >= 3.7, < 3.7.3 3.7.3 GHSA-m98q-q59p-r9fv

References