6 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-35133
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3,...
Moodle 3.x Bypass Vulnerability (Jan 2018) - Windows
Setting for blocked hosts list can be bypassed with multiple A record hostnames. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Session fixation
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...
PT-2018-9881
Name of the Vulnerable Software and Affected Versions: Moodle versions 3.x Description: The issue allows the setting for blocked hosts list to be bypassed using multiple A record hostnames. Recommendations: For Moodle versions 3.x, consider restricting the use of multiple A record hostnames to...
