Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4747
HistoryJul 27, 2017 - 5:54 a.m.

Open Redirect

2017-07-2705:54:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.003

Percentile

69.7%

Moodle is vulnerable to open redirects. The function clean_param in lib/moodlelib.php does not validate URLs properly, allowing a malicious user to pass a URL to the application to redirect other users to a malicious website.