CVE-2021-40691 A session hijack risk was identified in the Shibboleth authentication plugin

Description

A session hijack risk was identified in the Shibboleth authentication plugin.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Moodle	Versions non publiées

Autres CVE de Moodle

Les 89 CVE de Moodle →

CVE-2022-40208 In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… 4.3 Moyenne CVE-2021-36402 In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… 5.3 Moyenne CVE-2021-36395 In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… 7.5 Élevée CVE-2021-36392 In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses Non notée