Launchpad.net

Launchpad CVE tracker

CVE 2017-7489

In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.

See the

CVE page on Mitre.org for more details.

References

CONFIRM: https://moodle.org/mod...