Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
GHSA-hcm6-q6pc-xfhm
Moodle has an authorization logic flaw
GHSA-qv78-6gpp-hm68
Moodle Open Redirect vulnerability
GHSA-j5jv-w5cw-j9ff
Moodle authentication bypass vulnerability
GHSA-vwhw-vp9v-q9c9
Moodle vulnerable to Cross-site Scripting
GHSA-mhf6-pp52-8wqj
Moodle Cross-site Scripting (XSS) vulnerability
GHSA-8jrv-wx83-w3xj
Moodle Inserts Sensitive Information Into Sent Data
CVE-2025-67847
A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
CVE-2025-67847
A flaw was found in Moodle. An attacker with access to the restore int ...
CVE-2025-67847
A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
GHSA-xvmh-25jw-gmmm
Moodle affected by a code injection vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-hcm6-q6pc-xfhm Moodle has an authorization logic flaw | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад |
| GHSA-qv78-6gpp-hm68 Moodle Open Redirect vulnerability | CVSS3: 3.5 | 0% Низкий | 9 месяцев назад |
| GHSA-j5jv-w5cw-j9ff Moodle authentication bypass vulnerability | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
| GHSA-vwhw-vp9v-q9c9 Moodle vulnerable to Cross-site Scripting | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад |
| GHSA-mhf6-pp52-8wqj Moodle Cross-site Scripting (XSS) vulnerability | CVSS3: 7.3 | 0% Низкий | 9 месяцев назад |
| GHSA-8jrv-wx83-w3xj Moodle Inserts Sensitive Information Into Sent Data | CVSS3: 4.3 | 0% Низкий | 9 месяцев назад |
 | CVE-2025-67847 A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application. | CVSS3: 8.8 | 1% Низкий | 10 месяцев назад |
| CVE-2025-67847 A flaw was found in Moodle. An attacker with access to the restore int ... | CVSS3: 8.8 | 1% Низкий | 10 месяцев назад |
 | CVE-2025-67847 A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application. | CVSS3: 8.8 | 1% Низкий | 10 месяцев назад |
| GHSA-xvmh-25jw-gmmm Moodle affected by a code injection vulnerability | CVSS3: 8.8 | 1% Низкий | 10 месяцев назад |
Уязвимостей на страницу