Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
GHSA-4wvg-7886-83gv
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-5rr5-fxhc-jv64
Moodle allows attackers to modify the visibility of a badge
GHSA-h75f-hjcr-cvh8
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GHSA-c3vx-v4x8-x894
Moodle does not check for the moodle/course:viewhiddencourses capability
GHSA-267j-cwvg-j28c
Moodle attackers to modify grade metadata
GHSA-2fmv-j5xj-4fmq
Moodle Reveals Student Information Meant To Be Anonymous
GHSA-xhg2-vjrc-jqj8
repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to an incorrect CURLOPT_SSL_VERIFYHOST value.
GHSA-fc5p-vj3h-x7g4
Moodle allows attackers to obtain sensitive information
GHSA-6xpm-q8x9-j3rw
Moodle allows attackers to bypass intended access restrictions
GHSA-f9m9-494r-w36p
Moodle allows bypass of intended access restrictions
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-4wvg-7886-83gv Moodle cross-site request forgery (CSRF) vulnerability | 1% Низкий | около 4 лет назад | |
| GHSA-5rr5-fxhc-jv64 Moodle allows attackers to modify the visibility of a badge | 2% Низкий | около 4 лет назад | |
| GHSA-h75f-hjcr-cvh8 Moodle multiple cross-site request forgery (CSRF) vulnerabilities | 1% Низкий | около 4 лет назад | |
| GHSA-c3vx-v4x8-x894 Moodle does not check for the moodle/course:viewhiddencourses capability | 2% Низкий | около 4 лет назад | |
| GHSA-267j-cwvg-j28c Moodle attackers to modify grade metadata | 1% Низкий | около 4 лет назад | |
| GHSA-2fmv-j5xj-4fmq Moodle Reveals Student Information Meant To Be Anonymous | 2% Низкий | около 4 лет назад | |
| GHSA-xhg2-vjrc-jqj8 repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to an incorrect CURLOPT_SSL_VERIFYHOST value. | 1% Низкий | около 4 лет назад | |
| GHSA-fc5p-vj3h-x7g4 Moodle allows attackers to obtain sensitive information | 2% Низкий | около 4 лет назад | |
| GHSA-6xpm-q8x9-j3rw Moodle allows attackers to bypass intended access restrictions | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| GHSA-f9m9-494r-w36p Moodle allows bypass of intended access restrictions | 1% Низкий | около 4 лет назад |
Уязвимостей на страницу