CVE-2020-1755
CVE-2020-1755
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Patch —
Lifecycle
16 Aug 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
Affected products
n/a · MoodleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →