Moodle — система управления образовательными электронными курсами

Уязвимость виртуальной обучающей среды Moodle, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код и скомпрометировать систему

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

Moodle's error handling leads to sensitive information disclosure

Moodle does not properly enforce MFA

Moodle has a time restriction bypass

Moodle vulnerable to brute-force password guesses

Moodle exposed the names of hidden groups to users

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

Moodle sends quiz-related messages to inactive/suspended users

Moodle course access permissions are not properly checked in course_output_fragment_course_overview