CVE-2021-32478

2022-03-1100:00:00

CWE-79

redhat

www.cve.org

moodle lti authorization

reflected xss

open redirect

EPSS

0.001

Percentile

31.3%

JSON

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "moodle",
    "versions": [
      {
        "version": "3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8",
        "status": "affected"
      }
    ]
  }
]

References

moodle.org/mod/forum/discuss.php?d=422314

EPSS

0.001

Percentile

31.3%

JSON

Related for CVELIST:CVE-2021-32478