Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
GHSA-r227-v24c-j96q
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."
GHSA-h34c-px28-rjgw
Moodle mishandles group-based authorization checks
GHSA-6922-5v25-p8jg
Moodle multiple cross-site scripting (XSS) vulnerabilities
GHSA-hpmv-wvq3-gj27
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-gmhr-6f43-7qpj
Moodle does not properly implement group-based access restrictions
GHSA-mm9q-3847-m48x
Moodle allows attackers to enter additional answer attempts
GHSA-454r-4cjv-vc9h
Moodle allows attackers to obtain manager privileges
GHSA-grvw-qq2j-r898
Moodle multiple cross-site scripting (XSS) vulnerabilities
GHSA-688p-pgj4-77hh
Moodle allows attackers to obtain sensitive course-structure information
GHSA-2hw2-h3mf-c2j9
Moodle open redirect vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-r227-v24c-j96q The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants." | CVSS3: 4.3 | 2% Низкий | около 4 лет назад |
| GHSA-h34c-px28-rjgw Moodle mishandles group-based authorization checks | CVSS3: 4.3 | 2% Низкий | около 4 лет назад |
| GHSA-6922-5v25-p8jg Moodle multiple cross-site scripting (XSS) vulnerabilities | CVSS3: 6.1 | 1% Низкий | около 4 лет назад |
| GHSA-hpmv-wvq3-gj27 Moodle cross-site request forgery (CSRF) vulnerability | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| GHSA-gmhr-6f43-7qpj Moodle does not properly implement group-based access restrictions | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| GHSA-mm9q-3847-m48x Moodle allows attackers to enter additional answer attempts | CVSS3: 5.4 | 1% Низкий | около 4 лет назад |
| GHSA-454r-4cjv-vc9h Moodle allows attackers to obtain manager privileges | CVSS3: 6.8 | 2% Низкий | около 4 лет назад |
| GHSA-grvw-qq2j-r898 Moodle multiple cross-site scripting (XSS) vulnerabilities | CVSS3: 5.4 | 1% Низкий | около 4 лет назад |
| GHSA-688p-pgj4-77hh Moodle allows attackers to obtain sensitive course-structure information | 2% Низкий | около 4 лет назад | |
| GHSA-2hw2-h3mf-c2j9 Moodle open redirect vulnerability | CVSS3: 7.4 | 2% Низкий | около 4 лет назад |
Уязвимостей на страницу