GHSA-r2wx-46gp-rp3hHigh

Moodle Improper Input Validation

Published
May 31, 2024
Last Modified
June 4, 2024

🔗 CVE IDs covered (1)

CVE-2024-33999 →

📋 Description

Unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php. The referrer URL used by MFA required additional sanitizing, rather than being used directly.

🎯 Affected products1

  • composer/moodle/moodle:>= 4.3.0, < 4.3.4

🔗 References (4)