Moodle has a Hidden Functionality vulnerability

MOYENNE 5.3CVE-2021-36403 · BIT-moodle-2021-36403 · GHSA-j9cw-5cpj-9qj5 · Published 06/03/2023 · updated 17/06/2026

En bref

CVE-2021-36403 est une vulnérabilité MOYENNE (CVSS 5.3) touchant moodle/moodle, moodle (moodle).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.53%, plus élevée que 44.5% des vulnérabilités.
Correctif : mettre à jour vers 3.10.5, 3.11.1, 3.9.8 ou plus récent.

Package	Affected versions	Patched versions
moodle/moodle Packagist	`≥ 3.10.0-beta, < 3.10.5≥ 3.11.0-beta, < 3.11.1< 3.9.8`	`3.10.53.11.13.9.8`
moodle moodle	`≥ 3.10.0, < 3.10.5≥ 3.11.0, < 3.11.1< 3.9.8`	`3.10.53.11.13.9.8`

Description

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

NVD description

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

References

nvd.nist.gov/vuln/detail/CVE-2021-36403 · ADVISORY
moodle/moodle · PACKAGE
moodle.org/mod/forum/discuss.php · WEB

Autres vulnérabilités de moodle/moodle

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

moodle/moodle

Packagist

≥ 3.10.0-beta, < 3.10.5≥ 3.11.0-beta, < 3.11.1< 3.9.8

3.10.53.11.13.9.8

moodle

≥ 3.10.0, < 3.10.5≥ 3.11.0, < 3.11.1< 3.9.8

3.10.53.11.13.9.8

Description

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

NVD description

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

Autres vulnérabilités de moodle/moodle

Tout voir →