Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47414
HistoryJun 07, 2024 - 7:59 a.m.

Improper Input Validation

2024-06-0707:59:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
improper input validation
moodle
software
mfa

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

moodle/moodle is vulnerable to Improper Input Validation. The vulnerability is due to the lack of proper sanitization of the referrer URL in admin/tool/mfa/index.php, which is used directly by MFA.

CPENameOperatorVersion
moodle/moodlelev4.3.3
moodle/moodlelev4.3.3

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%