Moodle — система управления образовательными электронными курсами

An issue in Moodle\u2019s timed assignment feature allowed students to ...

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

Moodle exposed the names of hidden groups to users who had permission ...

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.

Moodle\u2019s mobile and web service authentication endpoints did not ...

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.

A serious authentication flaw allowed attackers with valid credentials ...

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

The router\u2019s inconsistent response to invalid course IDs allowed ...

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.