Security Advisory
CVE-2021-36396
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.