CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2024-38275
High (7.5) in moodle moodle. EPSS 0.4% chance of exploitation in the next 30 days.
The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-459, CWE-226
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moodle:moodle