GHSA-hpwm-84h5-vqr8MediumCVSS 6.5

Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames

Published
May 13, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2018-1043 →

📋 Description

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.2, < 3.2.7
  • composer/moodle/moodle:>= 3.3, < 3.3.4
  • composer/moodle/moodle:>= 3.4, < 3.4.1

🔗 References (4)