Threats tagged 'bit-moodle-2024-38275'

Moodle's cURL wrapper retained the HTTP authorization header when following emulated redirects, potentially causing sensitive authorization information to be sent unintentionally to redirected URLs. This behavior affects multiple Moodle versions prior to their respective fixed releases. A patch is available to address this issue.