vulnerability
Moodle: Unspecified Security Vulnerability (CVE-2021-32478)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Mar 11, 2022 | Mar 21, 2022 | Feb 15, 2026 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Mar 11, 2022
Added
Mar 21, 2022
Modified
Feb 15, 2026
Description
The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.
Solutions
moodle-upgrade-3_10_4moodle-upgrade-3_8_9moodle-upgrade-3_9_7
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.