Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 470
CVE-2024-43428
To address a cache poisoning risk in Moodle, additional validation for local storage was required.
CVE-2024-43425
A flaw was found in Moodle. Additional restrictions are required to av ...
CVE-2024-43425
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.
CVE-2024-43431
A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.
CVE-2024-43428
To address a cache poisoning risk in Moodle, additional validation for local storage was required.
CVE-2024-43434
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
CVE-2024-43425
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.
CVE-2024-43440
A flaw was found in moodle. A local file may include risks when restoring block backups.
BDU:2024-10264
Уязвимость виртуальной обучающей среды Moodle, связанная с недостатками механизма формирования отчетов об ошибках, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2024-10261
Уязвимость виртуальной обучающей среды Moodle, связанная с отсутствием процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к элементам системы
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2024-43428 To address a cache poisoning risk in Moodle, additional validation for local storage was required. | CVSS3: 7.7 | 0% Низкий | 8 месяцев назад |
| CVE-2024-43425 A flaw was found in Moodle. Additional restrictions are required to av ... | CVSS3: 8.1 | 89% Высокий | 8 месяцев назад |
| CVE-2024-43425 A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions. | CVSS3: 8.1 | 89% Высокий | 8 месяцев назад |
 | CVE-2024-43431 A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access. | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| CVE-2024-43428 To address a cache poisoning risk in Moodle, additional validation for local storage was required. | CVSS3: 7.7 | 0% Низкий | 8 месяцев назад |
| CVE-2024-43434 The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability. | CVSS3: 8.1 | 0% Низкий | 8 месяцев назад |
| CVE-2024-43425 A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions. | CVSS3: 8.1 | 89% Высокий | 8 месяцев назад |
| CVE-2024-43440 A flaw was found in moodle. A local file may include risks when restoring block backups. | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
 | BDU:2024-10264 Уязвимость виртуальной обучающей среды Moodle, связанная с недостатками механизма формирования отчетов об ошибках, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| BDU:2024-10261 Уязвимость виртуальной обучающей среды Moodle, связанная с отсутствием процедуры авторизации, позволяющая нарушителю получить несанкционированный доступ к элементам системы | CVSS3: 6.5 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу