VULNERABILITY INTELLIGENCE

CVE-2024-43432

CVSS score5.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2024-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-319

Primary references