Description

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.

Remediation

References

CVE-2021-36396

Related Vulnerabilities

PHP Use After Free Vulnerability (CVE-2019-9020)

Oracle Application Server CVE-2007-5517 Vulnerability (CVE-2007-5517)

WordPress Plugin WP People 'wp-people-popup.php' SQL Injection (2.0)

WordPress Plugin FV Flowplayer Video Player Cross-Site Request Forgery (7.5.30.7210)

WordPress Plugin Fast Image Adder Arbitrary File Upload (1.1)

Severity

High

Classification

CVE-2021-36396 CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities