CVE-2022-35652: Medium severity Moodle moodle vulnerability
An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature. A remote attacker can create a link that leads to a trusted website, however, when clicked, it redirects the victims to arbitrary URL/domain. Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.
Other sources
The mobile auto-login URL required additional sanitizing to prevent an open redirect risk.
Versions affected: 4.0 to 4.0.1, 3.11 to 3.11.7, 3.9 to 3.9.14 and earlier unsupported versions Versions fixed: 4.0.2, 3.11.8 and 3.9.15
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-35652?
CVE-2022-35652 is an open redirect vulnerability in Moodle that allows remote attackers to redirect users to arbitrary URLs/domains.
How does CVE-2022-35652 work?
CVE-2022-35652 occurs due to improper sanitization of user-supplied data in the mobile auto-login feature of Moodle, allowing attackers to create malicious links that redirect users to arbitrary destinations.
What is the severity of CVE-2022-35652?
The severity of CVE-2022-35652 is medium, with a CVSS score of 6.1.
Which versions of Moodle are affected by CVE-2022-35652?
Moodle versions 3.9.0 to 3.9.15, 3.11.0 to 3.11.8, and 4.0.0 to 4.0.2 are affected by CVE-2022-35652.
How can I mitigate the CVE-2022-35652 vulnerability in Moodle?
To mitigate the CVE-2022-35652 vulnerability in Moodle, it is recommended to upgrade to the latest patched version. For Moodle versions affected by the vulnerability, upgrade to 3.9.16, 3.11.9, or 4.0.3, or apply the patches provided by Moodle.