← Database

CVE-2021-36396

HIGH CVSS: 7.5 Published: 2023-03-06 Modified: 2026-06-17

Description

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.

Affected Platforms

Moodle Moodle

Weakness Type

CWE-918, CWE-918

References