Threats tagged 'bit-moodle-2024-43432'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2024-43432moodle · authorization headers preserved between "emulated redirects Medium5.3EPSS 0.3%2024-11-11CVE Database V5CVE-2024-43432 A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. EPSS 0.3%Vulnerability CWE-319 #bit-moodle-2024-43432 #bitnami	CVE Database V5	2024-11-11

Page 1 of 1