GHSA-pj45-hp8h-289rMediumCVSS 4.3

Moodle Secure layout contained an insecure link in Boost theme

Published
May 13, 2022
Last Modified
January 26, 2024

🔗 CVE IDs covered (1)

CVE-2019-3851 →

📋 Description

A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.

🎯 Affected products2

  • composer/moodle/moodle:>= 3.5, < 3.5.5
  • composer/moodle/moodle:>= 3.6, < 3.6.3

🔗 References (7)