GHSA-2hw2-h3mf-c2j9
Suggest an improvement- Source
- https://github.com/advisories/GHSA-2hw2-h3mf-c2j9
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-2hw2-h3mf-c2j9/GHSA-2hw2-h3mf-c2j9.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-2hw2-h3mf-c2j9
- Aliases
-
- CVE-2015-3272
- Published
- 2022-05-13T01:12:46Z
- Modified
- 2024-12-08T05:34:41.743206Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N CVSS Calculator
- Summary
- Moodle open redirect vulnerability
- Details
-
Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer header that has a substring match with a local URL.
- Database specific
{ "nvd_published_at": "2016-02-22T05:59:00Z", "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-01-26T01:14:09Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2015-3272
- https://github.com/moodle/moodle/commit/5673aae914070fa93b861a39f6bb3eae2f79bbc2
- https://github.com/moodle/moodle/commit/5c1f41f0583e9174ead1530f93dc4b260d8036d5
- https://github.com/moodle/moodle/commit/9580c08e9e4e5e80606d46aea2014f83f863534f
- https://github.com/moodle/moodle/commit/980bd08bdc01586bf8b5d407b049645ea6ff1174
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=316662
- https://web.archive.org/web/20150924032214/http://www.securitytracker.com/id/1032877
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50688
- http://openwall.com/lists/oss-security/2015/07/13/2
Affected packages
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle