Lucene search
HistoryAug 16, 2022 - 9:15 p.m.
CVE-2020-1755
moodle
ip spoofing
vulnerability
x-forwarded-for headers
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
31.3%
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user’s IP, in order to bypass remote address checks.
Affected configurations
Node
moodlemoodleRange3.5.0–3.5.11
ORmoodlemoodleRange3.6.0–3.6.9
ORmoodlemoodleRange3.7.0–3.7.5
ORmoodlemoodleRange3.8.0–3.8.2
Related
osv
osv
BIT-moodle-2020-1755
2024-03-06 11:12:08
CVE-2020-1755
2022-08-16 21:15:09
prion
prion
Design/Logic Flaw
2022-08-16 21:15:00
cve
cve
CVE-2020-1755
2022-08-16 21:15:09
cvelist
cvelist
CVE-2020-1755
2022-08-16 19:29:48
veracode
veracode
Spoofing Attacks
2022-08-17 08:19:39
ubuntucve
ubuntucve
CVE-2020-1755
2022-08-16 00:00:00
openvas
openvas
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
31.3%
Related for NVD:CVE-2020-1755