Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-36402

Description

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.

- https://moodle.org/mod/forum/discuss.php?d=424808

- https://github.com/jev770/badmoodle-scan