CVE-2021-32478

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.9"},{"introduced":"3.9.0"},{"fixed":"3.9.7"},{"introduced":"3.10.0"},{"fixed":"3.10.4"}]}]

Références

advisory moodle.org
web nvd.nist.gov