Skip to content
fr Sign in
Not rated

CVE-2021-32478 The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open…

Description

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

Affected products and versions

Product Affected versions Fixed in
Moodle Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Moodle

The 89 CVEs of Moodle →
CVE-2022-40208 In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… 4.3 Medium CVE-2021-36402 In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… 5.3 Medium CVE-2021-36395 In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… 7.5 High CVE-2021-36392 In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses Not rated
Track this CVE