Filter
composer/moodle/moodleMoodle: some users can delete audiences of other reports
6.5
First published (updated )
composer/moodle/moodleMoodle: idor when fetching report schedules
4.3
First published (updated )
composer/moodle/moodleMoodle: users' names returned in messaging error message
4.3
First published (updated )
composer/moodle/moodleMoodle: idor in edit/delete rss feed
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodlemoodle: CSRF risks due to misuse of confirm_sesskey
8.8
First published (updated )
composer/moodle/moodlemoodle: CSRF risk in analytics management of models
8.8
EPSS
0.04%
First published (updated )
composer/moodle/moodleInadequate access control vulnerability in Moodle
6.5
First published (updated )
composer/moodle/moodleMoodle: forum summary report shows students from other groups when in separate groups mode
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleMoodle: rce due to lfi risk in some misconfigured shared hosting environments
9.8
First published (updated )
Moodle MoodleMoodle: insufficient capability checks when updating the parent of a course category
5.3
First published (updated )
Moodle MoodleMoodle: cache poisoning risk with endpoint revision numbers
5.3
First published (updated )
Moodle MoodleMoodle: xss risk when previewing data in course upload tool
6.1
First published (updated )
Moodle MoodleMoodle: stored xss in quiz grading report via user id number
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: auto-populated h5p author name causes a potential information leak
5.3
First published (updated )
Moodle MoodleMoodle: stored xss and potential idor risk in wiki comments
6.5
First published (updated )
redhat/moodleMoodle: duplicating a bigbluebutton activity assigns the same meeting id
3.3
First published (updated )
composer/moodle/moodleMoodle: students can view other users in "only see own membership" groups
4.3
First published (updated )
Moodle MoodleMoodle: xss risk when using csv grade import method
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: authenticated remote code execution risk in imscp
8.8
First published (updated )
Moodle MoodleMoodle: authenticated remote code execution risk in lesson
8.8
First published (updated )
Moodle MoodleMoodle: ssrf risk due to insufficient check on the curl blocked hosts
7.5
First published (updated )
Moodle MoodleMoodle: minor sql injection risk on mnet sso access control page
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: minor sql injection risk in external wiki method for listing pages
7.3
First published (updated )
Fedoraproject FedoraMoodle: tinymce loaders susceptible to arbitrary folder creation
6.5
First published (updated )
Moodle MoodleIn Moodle, insufficient limitations in some quiz web services made it possible for students to bypas…
4.3
First published (updated )
Moodle MoodleMoodle: course participation report shows roles the user should not see
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.