Moodle CVE-2019-10133 Open Redirection Vulnerability

Bugtraq ID:	108426
Class:	Input Validation Error
CVE:	CVE-2019-10133
Remote:	Yes
Local:	No
Published:	May 20 2019 12:00AM
Updated:	May 20 2019 12:00AM
Credit:	Lindon Wass
Vulnerable:	Moodle Moodle 3.6.3 Moodle Moodle 3.6.2 Moodle Moodle 3.6.1 Moodle Moodle 3.5.5 Moodle Moodle 3.5.4 Moodle Moodle 3.5.3 Moodle Moodle 3.5.2 Moodle Moodle 3.5.1 Moodle Moodle 3.4.8 Moodle Moodle 3.4.7 Moodle Moodle 3.4.6 Moodle Moodle 3.4.5 Moodle Moodle 3.4.4 Moodle Moodle 3.4.3 Moodle Moodle 3.4.2 Moodle Moodle 3.1.17 Moodle Moodle 3.1.16 Moodle Moodle 3.1.15 Moodle Moodle 3.1.14 Moodle Moodle 3.1.13 Moodle Moodle 3.1.12 Moodle Moodle 3.1.11 Moodle Moodle 3.1.10 Moodle Moodle 3.1.9 Moodle Moodle 3.1.7 Moodle Moodle 3.1.4 Moodle Moodle 3.1.3 Moodle Moodle 3.1.2 Moodle Moodle 3.1.1 Moodle Moodle 3.6 Moodle Moodle 3.5 Moodle Moodle 3.4.1 Moodle Moodle 3.4 Moodle Moodle 3.1.8 Moodle Moodle 3.1.6 Moodle Moodle 3.1.5 Moodle Moodle 3.1
Not Vulnerable:	Moodle Moodle 3.6.4 Moodle Moodle 3.5.6 Moodle Moodle 3.4.9 Moodle Moodle 3.1.18 Moodle Moodle 3.7

Moodle CVE-2019-10133 Open Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Moodle CVE-2019-10133 Open Redirection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2019-10133 Open Redirection Vulnerability

References:

• Moodle Homepage (Moodle)
  
• MSA-19-0011: Open redirect in upload cohorts page (Moodle)