AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-45152

CRITICAL · CVSS 9.1 EPSS 1.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-45152
Severity
CRITICAL
CVSS
9.1
EPSS
1.35%

Original NVD Description

A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle's inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.