CVE-2021-32478

—

CVSS 3.1

6.1 medium

EPSS

1%p64

Published

Mar 11, 2022 (Mar 11, 2022)

Modified

Jun 17, 2026

Description

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

Vendors: moodle
Products: moodle
Weakness: CWE-79, CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.