CVE-2024-25979
Msa-24-0002: forum search accepted random parameters in its url
Summary
Msa-24-0002: forum search accepted random parameters in its url
Original description
The description as published by the source.
The URL parameters accepted by forum search were not limited to the allowed parameters.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.9"},{"introduced":"4.2.0"},{"fixed":"4.2.6"},{"introduced":"4.3.0"},{"fixed":"4.3.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web lists.fedoraproject.org
- web moodle.org
- web git.moodle.org