5 matches found
CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
CVE-2024-33999 moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
CVE-2024-33999 moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php
The referrer URL used by MFA required additional sanitizing, rather than being used directly...
CVE-2024-33999
CVE-2024-33999 affects Moodle (BIT-MOODLE-2024-33999) via unsafe direct use of the referrer URL in admin/tool/mfa/index.php. The underlying issue is inadequate sanitization of $_SERVER['HTTP_REFERER'], as noted by multiple sources. This vulnerability is described as impacting Moodle installations...
