Lucene search

CVE-2024-33999

🗓️ 31 May 2024 20:09:15Reported by fedoraType

CVE-2024-33999 security vulnerability in NVD

Reporter	Title	Published	Views	Family All 11
Vulnrichment	CVE-2024-33999 moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php	31 May 202419:53	–	vulnrichment
Cvelist	CVE-2024-33999 moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php	31 May 202419:53	–	cvelist
OSV	CVE-2024-33999	31 May 202420:15	–	osv
OSV	UBUNTU-CVE-2024-33999	31 May 202420:15	–	osv
OSV	GHSA-R2WX-46GP-RP3H Moodle Improper Input Validation	31 May 202421:30	–	osv
NVD	CVE-2024-33999	31 May 202420:15	–	nvd
UbuntuCve	CVE-2024-33999	31 May 202400:00	–	ubuntucve
Github Security Blog	Moodle Improper Input Validation	31 May 202421:30	–	github
Veracode	Improper Input Validation	7 Jun 202407:59	–	veracode
OpenVAS	Moodle 4.3.x < 4.3.4 Multiple Vulnerabilities	14 May 202400:00	–	openvas

[
  {
    "collectionURL": "https://git.moodle.org",
    "packageName": "Moodle",
    "versions": [
      {
        "status": "affected",
        "version": "4.3",
        "lessThanOrEqual": "4.3.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 May 2024 20:15Current

9.5High risk

Vulners AI Score9.5

CVSS39.8

EPSS0.00043

SSVC

CWE-20