Description
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
Remediation
References
Related Vulnerabilities
MySQL Divide By Zero Vulnerability (CVE-2019-16168)
Undertow Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
Oracle JRE CVE-2013-2440 Vulnerability (CVE-2013-2440)
WordPress Plugin UK Cookie Consent Cross-Site Scripting (2.3.9)
WordPress Plugin Locations Cross-Site Request Forgery (3.2.1)