ROS-20230911-07

A vulnerability in the Moodle virtual learning environment is related to insufficient validation of user input data.
data, an attacker could send a specially crafted HTTP request and make the application
initiate requests to arbitrary systems. Exploitation of the vulnerability could allow an attacker,
remotely access sensitive data located on a local network, or
send malicious requests to other servers from a vulnerable system.

A vulnerability in the Moodle virtual learning environment is related to insufficient cleansing of data submitted by
by users on the groups page. Exploitation of the vulnerability could allow an attacker acting
remotely to steal potentially sensitive information, modify the appearance of a web page, perform
phishing and disk loading attacks.

The vulnerability in the Moodle virtual learning environment is related to insufficient cleansing of user-provided
user-supplied data on the Mnet SSO access control page. Exploitation of the vulnerability could allow
an attacker acting remotely to read, delete, modify data in the database and gain full
control over the vulnerable application.