Description
A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.
Remediation
References
Related Vulnerabilities
WordPress Plugin The Events Calendar Security Bypass (3.11.2)
WordPress Plugin Delete All Comments Cross-Site Request Forgery (1.0)
WordPress Plugin Redirection Local File Inclusion (2.7.3)
MySQL CVE-2017-3464 Vulnerability (CVE-2017-3464)
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000499)