https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T01:32:11.000571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-43432 CVE-2024-43432 — Moodle: authorization headers preserved between "emulated redirects" 2026-10-15T01:32:11.001689+00:00

Affected: moodle

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.