CVE-2020-1755: Medium severity moodle vulnerability
Published Aug 16, 2022
·Updated
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
Affected Software
4 affected components
Moodle moodle>=3.5.0<3.5.11
Moodle moodle>=3.6.0<3.6.9
Moodle moodle>=3.7.0<3.7.5
Moodle moodle>=3.8.0<3.8.2
Remediation
Patch Available
Event History
Aug 16, 2022
CVE Published
via MITRE·07:29 PM
Data Sourced
via MITRE·07:29 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-1755?
CVE-2020-1755 is a vulnerability in Moodle versions before 3.8.2, 3.7.5, 3.6.9, and 3.5.11 that allows for IP spoofing using X-Forwarded-For headers.
2
How can an attacker exploit CVE-2020-1755?
An attacker can exploit CVE-2020-1755 by manipulating X-Forwarded-For headers to bypass remote address checks and spoof a user's IP address.
3
What is the severity of CVE-2020-1755?
CVE-2020-1755 has a severity rating of 5.3 (Medium).
4
Which versions of Moodle are affected by CVE-2020-1755?
Moodle versions before 3.8.2, 3.7.5, 3.6.9, and 3.5.11 are affected by CVE-2020-1755.
5
How can I fix CVE-2020-1755?
To fix CVE-2020-1755, update to Moodle version 3.8.2, 3.7.5, 3.6.9, or 3.5.11.