Moodle Open Redirect Vulnerability in OAuth Login Flow

A open redirect vulnerability has been identified in Moodle's OAuth login process. This flaw allows remote attackers to redirect users to malicious websites after they have authenticated. The issue stems from inadequate validation of redirect parameters, potentially leading to phishing attacks or unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in users being redirected to attacker-controlled sites, where they might be phished or exposed to malware. Such malware could compromise their systems, possibly through keylogging or other means of stealing credentials and personal information.