Description

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

Remediation

References

CVE-2021-36403

Related Vulnerabilities

WebLogic CVE-2022-21292 Vulnerability (CVE-2022-21292)

Squid Other Vulnerability (CVE-2024-25617)

Internet Information Services Other Vulnerability (CVE-1999-0739)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-3690)

ownCloud Credentials Management Errors Vulnerability (CVE-2012-5607)

Severity

Medium

Classification

CVE-2021-36403 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities