PT-2018-9881
CVE-2018-1043
·
Publicado
2018-01-22
·
Atualizado
2022-05-13
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Moodle versions 3.x
Description:
The issue allows the setting for blocked hosts list to be bypassed using multiple A record hostnames.
Recommendations:
For Moodle versions 3.x, consider restricting the use of multiple A record hostnames to minimize the risk of bypassing the blocked hosts list setting until a patch is available.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾