Description
The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-1475 Vulnerability (CVE-2013-1475)
WordPress Plugin Embed Swagger Cross-Site Scripting (1.0.0)
WordPress Plugin Acumbamail Information Disclosure (1.0.4)
MySQL CVE-2024-21069 Vulnerability (CVE-2024-21069)
Jboss EAP Improper Handling of Exceptional Conditions Vulnerability (CVE-2018-8039)