vulnerability

Moodle: Server-Side Request Forgery (SSRF) (CVE-2021-36396)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:C/A:N)
Published
Mar 6, 2023
Added
Mar 15, 2023
Modified
Jan 28, 2025

Description

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.

Solution(s)

moodle-upgrade-3_10_5moodle-upgrade-3_11_1moodle-upgrade-3_9_8

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today