Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2019-14830 - Vulnerability Database
Moodle

Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2019-14830

Medium
Reference: CVE-2019-14830
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-14830
Title: Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Overview:

A vulnerability was found in Moodle 3.7 to 3.7.1 3.6 to 3.6.5 3.5 to 3.5.7 and earlier unsupported versions where the mobile launch endpoint contained an open redirect in some circumstances which could result in a user39s mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured mobile service disabled or where the mobile app login method is quotvia the appquot).