Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2022-35652 - Vulnerability Database
Moodle

Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2022-35652

Medium
Reference: CVE-2022-35652
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-35652
Title: Moodle URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Overview:

An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature. A remote attacker can create a link that leads to a trusted website however when clicked it redirects the victims to arbitrary URL/domain. Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.