Linux Distros Unpatched Vulnerability : CVE-2019-6970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moodle 3.5.x before 3.5.4 allows SSRF. CVE-2019-6970 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

CVE-2019-6970

CVE-2019-6970 affects Moodle 3.5.x prior to 3.5.4, where a server-side request forgery (SSRF) vulnerability is identified. The available documents confirm the affected product (Moodle CMS) and the impact type (SSRF), but do not provide root-cause details, exploit steps, or a comprehensive fix. Th...