Steeven George

**Name of the Vulnerable Software and Affected Versions** moodle versions prior to 3.6.3 moodle versions prior to 3.5.5 moodle versions prior to 3.4.8 moodle versions prior to 3.1.17 **Description** A vulnerability was found where links within assignment submission comments would open directly in the same window, making them more susceptible to exploits due to the lack of the no-referrer header policy. **Recommendations** For versions prior to 3.6.3, update to version 3.6.3 or later. For versions prior to 3.5.5, update to version 3.5.5 or later. For versions prior to 3.4.8, update to version 3.4.8 or later. For versions prior to 3.1.17, update to version 3.1.17 or later.