GHSA-2HW2-H3MF-C2J9 Moodle open redirect vulnerability

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...

Open Redirect

Moodle is vulnerable to open redirects. The function cleanparam in lib/moodlelib.php does not validate URLs properly, allowing a malicious user to pass a URL to the application to redirect other users to a malicious website...

The vulnerability of the Moodle learning management system allows a hacker to redirect users to arbitrary websites.

The vulnerability of the cleanparam function in the Moodle learning management system’s library/moodlelib.php file is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites and carry out phishing attacks through actio...

Open redirect

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...

CVE-2015-3272: Undefined Security Weakness

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...