Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-43432

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

Published

2024-11-11T13:15:04.233

Last Modified

2025-05-01T16:08:59.050

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-319
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 4.1.12 Yes
Application moodle moodle < 4.2.9 Yes
Application moodle moodle < 4.3.6 Yes
Application moodle moodle < 4.4.2 Yes
References