Lucene search

K
osvGoogleOSV:GHSA-2HH3-JMV8-5FMX
HistoryMay 13, 2022 - 1:12 a.m.

Moodle Does Not Escape Characters In Email Headers

2022-05-1301:12:40
Google
osv.dev
12
moodle
email
injection
vulnerability
spam

EPSS

0.001

Percentile

32.7%

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.

EPSS

0.001

Percentile

32.7%