CVE-2019-14831

State: Published
Severity: Not scored
Published: Mar 19, 2021
Updated: Aug 5, 2024
Reserved: Aug 10, 2019

Description

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum's subscription mode was set to "forced subscription", the forum's subscribe link contained an open redirect.

Scores

The record has no CVSS score.

Weaknesses

CWE-601

Affected Products

Product	Versions
Moodlen/a	3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versionsAffected

References

https://moodle.org/mod/forum/discuss.php?d=391037
https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=32e2e06a8737afb07ee83abb3eacd39f8b181216

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.