Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-25979

Msa-24-0002: forum search accepted random parameters in its url

Description

The URL parameters accepted by forum search were not limited to the allowed parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.3.0 to < 4.3.3affected
  • 4.2.0 to < 4.2.6affected
  • 0 to < 4.1.9affected

References