https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:54:34.634201+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-11511 bdu:2024-11511 2026-10-14T22:54:34.645401+00:00 bdu:2024-11511 https://cve.radiocsirt.org/vuln/bit-moodle-2024-43432 BIT-moodle-2024-43432 — Moodle: authorization headers preserved between "emulated redirects" 2026-10-14T22:54:34.645437+00:00

Affected: Bitnami: moodle

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0696 certfr-2024-avi-0696 — De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-14T22:54:34.645481+00:00 certfr-2024-avi-0696 https://cve.radiocsirt.org/vuln/euvd-2026-200708 EUVD-2026-200708 2026-10-14T22:54:34.645508+00:00 EUVD-2026-200708 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43432 fkie_cve-2024-43432 2026-10-14T22:54:34.645527+00:00

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

 https://cve.radiocsirt.org/vuln/ghsa-7wmp-2xmx-g6h8 GHSA-7wmp-2xmx-g6h8 — Moodle authorization headers preserved between "emulated redirects" 2026-10-14T22:54:34.645561+00:00

Affected: Packagist: moodle/moodle

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43432 UBUNTU-CVE-2024-43432 2026-10-14T22:54:34.645598+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1877 WID-SEC-W-2024-1877 — Moodle: Mehrere Schwachstellen 2026-10-14T22:54:34.645637+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Code auszuführen, bestimmte administrative Aufgaben durchzuführen, Informationen preiszugeben, Daten zu manipulieren, Sicherheitsmechanismen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und eine nicht näher spezifizierte Wirkung zu erzielen.