Advisories · Technology
moodle.
Every CVE that names moodle among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems
- moodle
- Broken access control
- CVSS 5.3 Medium
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback
- moodle
- Broken access control
- CVSS 6.0 Medium
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber
- moodle
- SQL injection
- CVSS 7.1 High
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal
- moodle
- Path traversal
- CVSS 5.1 Medium
Moodle 3.10.3 - 'label' Persistent Cross Site Scripting
- Moodle
- Cross-site scripting (XSS)
-
Improper input validation in Moodle
- Moodle
- CWE-20
-
Insufficient verification of data authenticity in Moodle
- Moodle
- CWE-345
-
Resource allocation without limits in Moodle
- Moodle
- Denial of service
- CVSS 4.3 Medium
Improper access control in Moodle
- Moodle
- Broken access control
-
Code injection in Moodle
- Moodle
- Code injection
-
Open redirect in Moodle
- Moodle
- Open redirect
-
Open redirect in Moodle
- Moodle
- Open redirect
-
Moodle: A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5…
- Moodle
- CWE-573
-
Improper authorization in Moodle
- Moodle
- Broken access control
-
Moodle: Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag…
- Moodle
-
Moodle: Moodle before 2.2.2 has an external enrolment plugin context check issue where capability…
- Moodle
-
Moodle: Moodle before 2.2.2 has Personal information disclosure…
- Moodle
-
Moodle: Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users…
- Moodle
-
Moodle: Moodle before 2.2.2 has a course information leak in gradebook where users are able to…
- Moodle
-
Moodle: Moodle before 2.2.2 has a password and web services issue where when the user profile is…
- Moodle
-
Moodle: Moodle has a database activity export permission issue where the export function of the…
- Moodle