GHSA-4rmj-w58m-fvch
GitHub Security Advisory
Moodle vulnerable to Server-Side Request Forgery
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.
Affected Packages
Packagist
moodle/moodle
Affected versions:
3.11.0-beta
(fixed in 3.11.1)
Packagist
moodle/moodle
Affected versions:
3.10.0-beta
(fixed in 3.10.5)
Packagist
moodle/moodle
Affected versions:
0
(fixed in 3.9.8)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: June 14, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.