Описание
Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| cosmic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| devel | not-affected | 3.0.3+dfsg-0ubuntu1 |
| disco | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/bionic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/xenial | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needs-triage |
Показывать по
EPSS
5.8 Medium
CVSS2
Связанные уязвимости
Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header.
Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x ...
Уязвимость системы управления обучением Мoodle, позволяющая нарушителю проводить фишинговые атаки
EPSS
5.8 Medium
CVSS2