high7.5
CVE-2021-36396
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.
Impact
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | before 3.9.8 from 3.10.0 before 3.10.5 from 3.11.0 before 3.11.1 |