CVE-2024-38275

7.5HIGH

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

Опубликовано: 6/18/2024Обновлено: 4/30/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

ИИ-АнализНа базе ИИ

Затронутые продукты

moodlemoodle
moodlemoodle
moodlemoodle
moodlemoodle
4.4.0

Ссылки