CVE-2022-45149

CVE-2022-45149 affects Moodle and stems from insufficient validation of the HTTP request origin in a course redirect URL, causing the user’s CSRF token to be included in the URL during a redirect when restoring a course. The vulnerability enables a remote attacker to lure a victim to a crafted pa...