Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xw58-hp5c-6wc2

Опубликовано: 30 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 2.2

Описание

A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal program objects, which may result in unexpected application behavior.

A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal program objects, which may result in unexpected application behavior.

EPSS

Процентиль: 15%
0.00236
Низкий

2.2 Low

CVSS3

Дефекты

CWE-470

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 месяца назад

A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal program objects, which may result in unexpected application behavior.

CVSS3: 4.3
nvd
около 1 месяца назад

A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal program objects, which may result in unexpected application behavior.

CVSS3: 4.3
debian
около 1 месяца назад

A flaw was found in Moodle. An authenticated attacker can supply an im ...

CVSS3: 8.8
altlinux
3 месяца назад

ALT-PU-2026-12636: package `moodle` update to version 5.2.2-alt1

EPSS

Процентиль: 15%
0.00236
Низкий

2.2 Low

CVSS3

Дефекты

CWE-470