Description
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.
Remediation
References
Related Vulnerabilities
Java Multiple Vulnerabilities (CVE-2018-13785)
MySQL CVE-2020-14873 Vulnerability (CVE-2020-14873)
MySQL CVE-2020-14567 Vulnerability (CVE-2020-14567)
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-5419)
WordPress Plugin BePro Listings Arbitrary File Upload (2.2.0020)