~ / search / GHSA-92vh-mr2w-j2cr

GHSA-92vh-mr2w-j2cr

Moodle Improper Authentication

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-40691

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.9, < 3.9.10 3.9.10
Packagist moodle/moodle >= 3.10, < 3.10.7 3.10.7
Packagist moodle/moodle >= 3.11, < 3.11.3 3.11.3

Details

As written in the advisory (Markdown source, shown as plain text).

A session hijack risk was identified in the Shibboleth authentication plugin.

References

External links from the advisory. They lead to third-party sites.