Lucene search

K
osvGoogleOSV:CVE-2021-32478
HistoryMar 11, 2022 - 6:15 p.m.

CVE-2021-32478

2022-03-1118:15:19
Google
osv.dev
12
cve-2021-32478
lti authorization
redirect uri
reflected xss
open redirect
moodle

EPSS

0.001

Percentile

31.3%

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

EPSS

0.001

Percentile

31.3%