CVE-2021-36396

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
n/a	Moodle	3.11, 3.10 to 3.10.4, 3.9 to 3.9.7 and earlier unsupported versions

References

https://moodle.org/mod/forum/discuss.php?d=424802Patch, Vendor Advisory
https://moodle.org/mod/forum/discuss.php?d=424802Patch, Vendor Advisory

Timeline

Published: Mar 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-363975.3In Moodle, insufficient capability checks meant message deletions were not limited to the current user.CVE-2021-363985.4In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.CVE-2021-363995.4In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk.CVE-2021-36407.0A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER CVE-2021-364005.3In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.CVE-2021-364014.8In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.CVE-2021-364025.3In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.CVE-2021-364035.3In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may CVE-2021-364085.5An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265.CVE-2021-364097.8There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attack CVE-2021-36416.1Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools fo CVE-2021-364105.5A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.