Описание
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
Ссылки
- Patch
- PatchVendor Advisory
- Patch
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00161
Низкий
4.9 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
ubuntu
почти 13 лет назад
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
debian
почти 13 лет назад
Open redirect vulnerability in the Calendar set page in Moodle 2.1.x b ...
EPSS
Процентиль: 38%
0.00161
Низкий
4.9 Medium
CVSS2
Дефекты
CWE-20