CVE-2019-14830
Medium
Description
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user's mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured, mobile service disabled, or where the mobile app login method is "via the app").
SeverityMedium
CVSS6.1
Exploit probability—
Product
Moodle
PublishedMar 19, 2021
First seenMar 19, 2021
Weakness typeCWE-601Open redirect
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moodle moodle | 3.5.0 ≤ v ≤ 3.5.7, 3.6.0 ≤ v ≤ 3.6.5, 3.7.0 ≤ v ≤ 3.7.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.