Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2011-4294

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-hxmp-8f47-x9fc

Moodle Open Redirect Via Error Messages The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via error message links that lead offsite.

gitlab/packagist/moodle/moodle/CVE-2011-4294

Improper Input Validation The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors.