Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-10133

Fixed upstream EPSS <1%CVSS 3.1

A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.

Published 2019-06-26 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle3.6.4
Packagistmoodle/moodle3.5.6
Packagistmoodle/moodle3.4.9
Packagistmoodle/moodle3.1.18

Distro releases

ReleasePackageFixed in
Ubuntu:Pro:16.04:LTSmoodleno fix
Ubuntu:Pro:18.04:LTSmoodleno fix