Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2024-43432 — MEDIUM severity vulnerability | Release Alert

CVE-2024-43432

5.3

MEDIUMCVSS v3

Published

November 11, 2024

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.

GitHubMoodle - the world's open source learning platform

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

Crates.ioMoodle Webservice Client in Rust.

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

NPM

More on this CVE

NVD↗GitHub Advisory↗

Model module for node for use with both mongodb and mysql.

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

Python Package IndexMoodle web services connection library

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

RubyGemsInteract with Moodle from ruby

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

GitHubModel module for node for use with both mongodb and mysql.

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD