Description
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
Remediation
References
Related Vulnerabilities
Joomla CVE-2018-15881 Vulnerability (CVE-2018-15881)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4589)
Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-15225)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-18033)