Threats tagged 'bit-moodle-2024-33999'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	–	EPSS 0.5%	CVE-2024-33999moodle · unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php CriticalEPSS 0.5%2025-05-31GCVE DatabaseCVE-2024-33999 A critical vulnerability in Moodle versions 4.3.0 through before 4.3.4 involves unsafe direct use of the HTTP_REFERER server variable in the multi-factor authentication (MFA) admin tool. The referrer URL was used without sufficient sanitization, potentially allowing security issues related to untrusted input. A patch is available to address this issue. EPSS 0.5%Vulnerability #bit-moodle-2024-33999 #bitnami	GCVE Database	2025-05-31

Page 1 of 1