Lucene search

K
osvGoogleOSV:GHSA-78FM-QHH8-8858
HistoryMar 12, 2022 - 12:00 a.m.

Moodle reflected XSS

2022-03-1200:00:32
Google
osv.dev
18
moodle
lti
authorization

EPSS

0.001

Percentile

31.3%

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

EPSS

0.001

Percentile

31.3%