GHSA-gv8f-43pg-c5qwMediumCVSS 5.3

Moodle Improper Input Validation vulnerability

Published
March 7, 2023
Last Modified
March 13, 2023

🔗 CVE IDs covered (1)

CVE-2021-36402 →

📋 Description

In affected versions of Moodle, users' names require additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk. This issue has been patched in versions 3.9.8, 3.10.5 and 3.11.1.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.11.0-beta, < 3.11.1
  • composer/moodle/moodle:>= 3.10.0-beta, < 3.10.5
  • composer/moodle/moodle:< 3.9.8

🔗 References (3)