Lucene search
GitHub Advisory DatabaseGHSA-78FM-QHH8-8858HistoryMar 12, 2022 - 12:00 a.m.
Moodle reflected XSS
2022-03-1200:00:32
CWE-79
GitHub Advisory Database
github.com
11
0.001 Low
EPSS
Percentile
30.8%
The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | 3.8.8 | |
| moodle/moodle | le | 3.9.6 | |
| moodle/moodle | le | 3.10.3 |
Related
osv
osv
CVE-2021-32478
2022-03-11 18:15:19
Moodle reflected XSS
2022-03-12 00:00:32
BIT-moodle-2021-32478
2024-03-06 11:09:51
openvas
openvas
veracode
veracode
Cross-site Scripting (XSS)
2022-03-15 12:59:03
prion
prion
Open redirect
2022-03-11 18:15:00
cvelist
cvelist
CVE-2021-32478
2022-03-11 00:00:00
ubuntucve
ubuntucve
CVE-2021-32478
2022-03-11 00:00:00
cve
cve
CVE-2021-32478
2022-03-11 18:15:00
nessus
nessus
Moodle 3.8.x < 3.8.9 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.5.x < 3.5.18 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.7 Multiple Vulnerabilities
2023-02-20 00:00:00
