CVE-2019-14831
First published: Fri Mar 19 2021(Updated: )
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum's subscription mode was set to "forced subscription", the forum's subscribe link contained an open redirect.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle Moodle | >=3.5.0<=3.5.7 | |
| Moodle Moodle | >=3.6.0<=3.6.5 | |
| Moodle Moodle | >=3.7.0<=3.7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/moodle
- canonical/moodle moodle
- version/moodle moodle/3.5.0
- version/moodle moodle/3.5.7
- version/moodle moodle/3.6.0
- version/moodle moodle/3.6.5
- version/moodle moodle/3.7.0
- version/moodle moodle/3.7.1