5 matches found
CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
9.8CVSS6.5AI score0.00541EPSS
SaveExploits0References1
CVE-2024-33999 moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
9.8CVSS7.2AI score
SaveExploits0References4
CVE-2024-33999
CVE-2024-33999 affects Moodle (BIT-MOODLE-2024-33999) via unsafe direct use of the referrer URL in admin/tool/mfa/index.php. The underlying issue is inadequate sanitization of $_SERVER['HTTP_REFERER'], as noted by multiple sources. This vulnerability is described as impacting Moodle installations...
9.8CVSS9.5AI score0.00541EPSS
SaveExploits0References1Affected Software1
20