Lucene search
GoogleOSV:GHSA-R2WX-46GP-RP3HHistoryMay 31, 2024 - 9:30 p.m.
Moodle Improper Input Validation
2024-05-3121:30:53
Google
osv.dev
moodle
improper input validation
security vulnerability
$_server
mfa
Unsafe direct use of $_SERVER[‘HTTP_REFERER’] in admin/tool/mfa/index.php. The referrer URL used by MFA required additional sanitizing, rather than being used directly.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | eq | 4.3.3 | |
| moodle/moodle | eq | 4.3.1 | |
| moodle/moodle | eq | 4.3.2 | |
| moodle/moodle | eq | 4.3.0 |
Related
veracode
veracode
Improper Input Validation
2024-06-07 07:59:41
cvelist
cvelist
nvd
nvd
CVE-2024-33999
2024-05-31 20:15:09
cve
cve
CVE-2024-33999
2024-05-31 20:15:09
ubuntucve
ubuntucve
CVE-2024-33999
2024-05-31 00:00:00
github
github
Moodle Improper Input Validation
2024-05-31 21:30:53
openvas
openvas
Moodle 4.3.x < 4.3.4 Multiple Vulnerabilities
2024-05-14 00:00:00