Filter
AND
AND
Moodle MoodleIn Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
9.8
First published (updated )
composer/moodle/moodleOS Command Injection, Command Injection
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleA denial-of-service risk was identified in the draft files area, due to it not respecting user file …
7.5
First published (updated )
Moodle MoodleIn Moodle, the file repository's URL parsing required additional recursion handling to mitigate the …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleAn authentication bypass risk was identified in the external database authentication functionality, …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleThe calendar:manageentries capability allowed managers to access or modify any calendar event, but s…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleWhen creating a user account, it was possible to verify the account without having access to the ver…
5.3
First published (updated )
Moodle MoodleIt was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose …
5.3
First published (updated )
Moodle MoodleInsufficient capability checks made it possible to fetch other users' calendar action events.
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleIn Moodle, insufficient capability checks meant message deletions were not limited to the current us…
5.3
First published (updated )
Moodle MoodleIn Moodle, in some circumstances, email notifications of messages could have the link back to the or…
5.3
First published (updated )
Moodle MoodleIn Moodle, insufficient capability checks made it possible to remove other users' calendar URL subsc…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.