Filter
AND
AND
Moodle MoodleMoodle: cache poisoning risk with endpoint revision numbers
5.3
First published (updated )
Moodle MoodleMoodle: xss risk when previewing data in course upload tool
6.1
First published (updated )
composer/moodle/moodleMoodle: rce due to lfi risk in some misconfigured shared hosting environments
9.8
First published (updated )
Moodle MoodleMoodle: insufficient capability checks when updating the parent of a course category
5.3
First published (updated )
composer/moodle/moodleMoodle: forum summary report shows students from other groups when in separate groups mode
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleMoodle: authenticated remote code execution risk in lesson
8.8
First published (updated )
Moodle MoodleMoodle: xss risk when using csv grade import method
6.1
First published (updated )
Moodle MoodleMoodle: authenticated remote code execution risk in imscp
8.8
First published (updated )
Moodle MoodleMoodle: stored xss and potential idor risk in wiki comments
6.5
First published (updated )
Moodle MoodleMoodle: auto-populated h5p author name causes a potential information leak
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleInsufficient capability checks made it possible to fetch other users' calendar action events.
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleAn authentication bypass risk was identified in the external database authentication functionality, …
6.5
First published (updated )
Moodle MoodleInsufficient capability checks made it possible for teachers to download users outside of their cour…
4.3
First published (updated )
Moodle MoodleA session hijack risk was identified in the Shibboleth authentication plugin.
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleInsufficient escaping of the LaTeX preamble made it possible for site administrators to read files a…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleIn Moodle, insufficient capability checks meant message deletions were not limited to the current us…
5.3
First published (updated )
Moodle MoodleIn Moodle, the file repository's URL parsing required additional recursion handling to mitigate the …
7.5
First published (updated )
Moodle MoodleIn Moodle, in some circumstances, email notifications of messages could have the link back to the or…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.