Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2019-10133
A flaw was found in Moodle before 3.7 3.6.4 3.5.6 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field which was not restricted to internal URLs.