CVE-2021-32478

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to...

Original description

The description as published by the source.

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.9"},{"introduced":"3.9.0"},{"fixed":"3.9.7"},{"introduced":"3.10.0"},{"fixed":"3.10.4"}]}]

References

advisory moodle.org
web nvd.nist.gov