PT-2021-3685 · Moodle+1 · Moodle+1

Holme + 1 · Published 2020-10-15 · Updated 2025-03-05 · CVE-2021-36396

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description The issue is related to insufficient redirect handling in Moodle, allowing an attacker to bypass cURL blocked hosts/allowed ports restrictions. This results in a blind Server-Side Request Forgery (SSRF) risk, where an attacker can exploit the vulnerability to perform SSRF attacks. The vulnerability is associated with inadequate input validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

ALT-PU-2020-3059

ALT-PU-2020-3235

ALT-PU-2020-3289

ALT-PU-2021-1050

ALT-PU-2021-1098

ALT-PU-2021-1445

ALT-PU-2021-1497

ALT-PU-2021-1777

ALT-PU-2021-2215

ALT-PU-2021-2787

ALT-PU-2021-3258

ALT-PU-2021-3335

ALT-PU-2022-1064

ALT-PU-2022-1476

ALT-PU-2022-1641

ALT-PU-2022-2450

BDU:2021-03918

BIT-MOODLE-2021-36396

CVE-2021-36396

GHSA-4RMJ-W58M-FVCH

Affected Products

Alt Linux

Moodle

References · 16

• 🔥 https://github.com/T0X1Cx/CVE-2021-36396-Exploit · Exploit
• https://moodle.org/mod/forum/discuss.php?d=424802 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-36396 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36396 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2021-36396 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4rmj-w58m-fvch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36396 · Security Note
• https://bdu.fstec.ru/vul/2021-03918 · Security Note
• https://ubuntu.com/security/CVE-2021-36396 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-36396 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://t.me/cvenotify/113570 · Telegram Post
• https://t.me/cibsecurity/59517 · Telegram Post
• https://securitylab.ru/vulnerability/522422.php · Note
• https://cybersecurity-help.cz/vdb/SB2021071911 · Note