CVE-2018-1043 In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames

Description

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.

Affected products and versions

Product	Affected versions	Fixed in
Moodle 3.x	Versions not published

Other CVEs of Moodle 3.x

The 10 CVEs of Moodle 3.x →

CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker Not rated CVE-2018-1044 In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings Not rated CVE-2018-1045 In Moodle 3.x, there is XSS via a calendar event name Not rated CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course Not rated