Auditing Moodle's core hunting for logical bugs
Summary
Quarkslab's Moodle 4.4.3 audit: a TOCTOU logical bug lets them bypass all restrictions guarding against SSRF, a scenario echoing Orange Tsai's URL parser abuse research.
- Published
- Collected
Skip to content