GHSA-92vh-mr2w-j2cr
GitHub Security Advisory
Moodle Improper Authentication
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
A session hijack risk was identified in the Shibboleth authentication plugin.
Affected Packages
Packagist
moodle/moodle
Affected versions:
3.9
(fixed in 3.9.10)
Packagist
moodle/moodle
Affected versions:
3.10
(fixed in 3.10.7)
Packagist
moodle/moodle
Affected versions:
3.11
(fixed in 3.11.3)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 15, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.