CVE-2024-38275

7.5HIGH

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

发布于: 6/18/2024更新于: 4/30/2025
在NVD查看在MITRE查看

描述

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

AI分析AI驱动

受影响产品

moodlemoodle
moodlemoodle
moodlemoodle
moodlemoodle
4.4.0

参考资料