CVE-2016-2190

—

CVSS 3.0

5.3 medium

EPSS

2%p79

Published

May 22, 2016 (May 22, 2016)

Modified

Jun 17, 2026

Description

Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.

Vendors: moodle
Products: moodle
Weakness: CWE-264
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.