https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:20:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-07408 bdu:2022-07408 https://cve.radiocsirt.org/vuln/bdu:2022-07408 https://cve.radiocsirt.org/vuln/bit-moodle-2022-45152 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> https://cve.radiocsirt.org/vuln/bit-moodle-2022-45152 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1046 https://cve.radiocsirt.org/vuln/euvd-2026-235604 EUVD-2026-235604 https://cve.radiocsirt.org/vuln/euvd-2026-235604 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45152 <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45152 https://cve.radiocsirt.org/vuln/ghsa-xqcf-vgqc-pcmg <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-xqcf-vgqc-pcmg https://cve.radiocsirt.org/vuln/gsd-2022-45152 gsd-2022-45152 https://cve.radiocsirt.org/vuln/gsd-2022-45152 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45152 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle&#39;s inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45152