Filter
AND
Moodle MoodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a us…
5.3
First published (updated )
Moodle MoodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves…
8.8
First published (updated )
Moodle MoodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it ca…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleA denial-of-service risk was identified in the draft files area, due to it not respecting user file …
7.5
First published (updated )
Moodle MoodleThe web service responsible for fetching other users' enrolled courses did not validate that the req…
4.3
First published (updated )
Moodle MoodleWhen creating a user account, it was possible to verify the account without having access to the ver…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleIt was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleA vulnerability was found in Moodle where users with "Log in as" capability in a course context (typ…
8.8
First published (updated )
Moodle MoodleA vulnerability was found in Moodle where the decompressed size of zip files was not checked against…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/moodleIf the upload course tool was used to delete an enrolment method which did not exist or was not alre…
5.3
First published (updated )
redhat/moodleInsufficient capability checks could lead to users with the ability to course restore adding additio…
7.5
First published (updated )
redhat/moodleUsers' enrolment capabilities were not being sufficiently checked when they restored into an existin…
7.5
First published (updated )