CVE-2021-32478
- Source
- https://cve.org/CVERecord?id=CVE-2021-32478
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-32478.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-32478
- Aliases
- Downstream
- Published
- 2022-03-11T18:15:19.587Z
- Modified
- 2026-03-13T04:54:56.141086Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.
- References
Affected packages
Git / github.com/moodle/moodle
Affected ranges
- Type
- GIT
- Repo
- https://github.com/moodle/moodle
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "versions": [ { "introduced": "0" }, { "fixed": "3.8.9" }, { "introduced": "3.9.0" }, { "fixed": "3.9.7" }, { "introduced": "3.10.0" }, { "fixed": "3.10.4" } ] }