https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:21:45.684748+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-07405 bdu:2022-07405 2026-10-05T17:21:45.797806+00:00 bdu:2022-07405 https://cve.radiocsirt.org/vuln/bit-moodle-2022-45149 BIT-moodle-2022-45149 2026-10-05T17:21:45.797855+00:00

Affected: Bitnami: moodle

A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 certfr-2022-avi-1046 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une exécution… 2026-10-05T17:21:45.797916+00:00 certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/cnvd-2022-86383 cnvd-2022-86383 2026-10-05T17:21:45.797947+00:00 cnvd-2022-86383 https://cve.radiocsirt.org/vuln/euvd-2026-235259 EUVD-2026-235259 2026-10-05T17:21:45.797969+00:00 EUVD-2026-235259 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45149 fkie_cve-2022-45149 2026-10-05T17:21:45.797987+00:00

A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.

 https://cve.radiocsirt.org/vuln/ghsa-8v23-w4w5-w83c GHSA-8v23-w4w5-w83c — Cross-Site Request Forgery in Moodle 2026-10-05T17:21:45.798023+00:00

Affected: Packagist: moodle/moodle

A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.

 https://cve.radiocsirt.org/vuln/gsd-2022-45149 gsd-2022-45149 2026-10-05T17:21:45.798067+00:00 gsd-2022-45149 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45149 UBUNTU-CVE-2022-45149 2026-10-05T17:21:45.798092+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.