CVE-2021-36396

2023-03-0600:00:00

CWE-918

fedora

www.cve.org

moodle

redirect handling

blind ssrf

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Moodle",
    "versions": [
      {
        "version": "3.11, 3.10 to 3.10.4, 3.9 to 3.9.7 and earlier unsupported versions",
        "status": "affected"
      }
    ]
  }
]