https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:01:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-07405 bdu:2022-07405 https://cve.radiocsirt.org/vuln/bdu:2022-07405 https://cve.radiocsirt.org/vuln/bit-moodle-2022-45149 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> https://cve.radiocsirt.org/vuln/bit-moodle-2022-45149 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/cnvd-2022-86383 cnvd-2022-86383 https://cve.radiocsirt.org/vuln/cnvd-2022-86383 https://cve.radiocsirt.org/vuln/euvd-2026-235259 EUVD-2026-235259 https://cve.radiocsirt.org/vuln/euvd-2026-235259 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45149 <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45149 https://cve.radiocsirt.org/vuln/ghsa-8v23-w4w5-w83c <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-8v23-w4w5-w83c https://cve.radiocsirt.org/vuln/gsd-2022-45149 gsd-2022-45149 https://cve.radiocsirt.org/vuln/gsd-2022-45149 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45149 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user&#39;s CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45149