Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 577
GHSA-x32v-7qw8-cpq8
Moodle Unauthenticated Access
GHSA-69xm-pcg8-8qxm
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
GHSA-gccq-w3xv-4gqh
Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attempt.
GHSA-xmwv-mqh8-4xgw
Moodle allows remote attackers to read arbitrary files
GHSA-3m99-h3hp-w9j7
Moodle remote code execution via quiz questions
GHSA-c4cq-v4wp-28hg
Moodle sensitive information disclosure
GHSA-x47x-gxp5-7pvg
Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task.
GHSA-27j2-c838-c3qg
Moodle Arbitrary File Read via XML External Entity vulnerability
GHSA-fccf-p8fx-vjj4
Moodle vulnerable to PHP object injection attacks
GHSA-hwjv-mc78-cccj
Moodle multiple cross-site scripting (XSS) vulnerabilities
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-x32v-7qw8-cpq8 Moodle Unauthenticated Access | CVSS3: 5.3 | 0% Низкий | больше 3 лет назад |
| GHSA-69xm-pcg8-8qxm In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services. | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| GHSA-gccq-w3xv-4gqh Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attempt. | 0% Низкий | больше 3 лет назад | |
| GHSA-xmwv-mqh8-4xgw Moodle allows remote attackers to read arbitrary files | 0% Низкий | больше 3 лет назад | |
| GHSA-3m99-h3hp-w9j7 Moodle remote code execution via quiz questions | 1% Низкий | больше 3 лет назад | |
| GHSA-c4cq-v4wp-28hg Moodle sensitive information disclosure | CVSS3: 5.4 | 0% Низкий | больше 3 лет назад |
| GHSA-x47x-gxp5-7pvg Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task. | 0% Низкий | больше 3 лет назад | |
| GHSA-27j2-c838-c3qg Moodle Arbitrary File Read via XML External Entity vulnerability | 0% Низкий | больше 3 лет назад | |
| GHSA-fccf-p8fx-vjj4 Moodle vulnerable to PHP object injection attacks | 2% Низкий | больше 3 лет назад | |
| GHSA-hwjv-mc78-cccj Moodle multiple cross-site scripting (XSS) vulnerabilities | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу