| Package | Affected versions | Patched versions |
|---|---|---|
| moodle | ≥ 3.5.0, < 3.5.11≥ 3.6.0, < 3.6.9≥ 3.7.0, < 3.7.5≥ 3.8.0, < 3.8.2 | 3.5.113.6.93.7.53.8.2 |
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free