CVE-2024-38275 - The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP a

CVE-2024-38275

Summary

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

References

https://moodle.org/mod/forum/discuss.php?d=459500

Vulnerable Configurations

CVSS

Base:	None
Impact:
Exploitability:

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

03-07-2024 - 02:04

Published

18-06-2024 - 20:15

Last modified

03-07-2024 - 02:04