https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 14:25:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11511 bdu:2024-11511 https://cve.radiocsirt.org/vuln/bdu:2024-11511 https://cve.radiocsirt.org/vuln/bit-moodle-2024-43432 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> https://cve.radiocsirt.org/vuln/bit-moodle-2024-43432 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0696 certfr-2024-avi-0696 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0696 https://cve.radiocsirt.org/vuln/euvd-2026-200708 EUVD-2026-200708 https://cve.radiocsirt.org/vuln/euvd-2026-200708 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43432 <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-43432 https://cve.radiocsirt.org/vuln/ghsa-7wmp-2xmx-g6h8 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> https://cve.radiocsirt.org/vuln/ghsa-7wmp-2xmx-g6h8 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43432 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-43432 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1877 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Code auszuführen, bestimmte administrative Aufgaben durchzuführen, Informationen preiszugeben, Daten zu manipulieren, Sicherheitsmechanismen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und eine nicht näher spezifizierte Wirkung zu erzielen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Code auszuführen, bestimmte administrative Aufgaben durchzuführen, Informationen preiszugeben, Daten zu manipulieren, Sicherheitsmechanismen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und eine nicht näher spezifizierte Wirkung zu erzielen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1877