Moodle — система управления образовательными электронными курсами

Moodle vulnerable to brute-force password guesses

Moodle's error handling leads to sensitive information disclosure

Moodle has a time restriction bypass

Moodle exposed the names of hidden groups to users

Moodle does not properly enforce MFA

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

Moodle sends quiz-related messages to inactive/suspended users

Moodle course access permissions are not properly checked in course_output_fragment_course_overview

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.