Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
GHSA-xh2j-q4mc-v522
Moodle calculated question type allows remote code execution by Question authors
GHSA-wxvp-8q8h-r6rr
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory
GHSA-wm4w-8vc6-2j4h
Moodle XSS Vulnerability
GHSA-wxqg-fg7v-mmc6
Moodle Authenticated Spelling Binary Remote Code Execution
GHSA-xhfw-wjjc-4j5h
Moodle Cross-site Scripting
GHSA-x5hj-47vv-53p8
YUI Cross-site Scripting (XSS) vulnerability
GHSA-wp3g-pr4h-q6vv
Moodle does not enforce capability requirements for reading blog comments
GHSA-xj5f-qv37-r9jc
Moodle Login CSRF vulnerability in login form
GHSA-wpq5-q3mj-8f3r
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GHSA-227w-xh58-rx2j
Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to hijack the authentication of arbitrary users for requests that send course messages.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-xh2j-q4mc-v522 Moodle calculated question type allows remote code execution by Question authors | CVSS3: 8.8 | 31% Средний | больше 4 лет назад |
| GHSA-wxvp-8q8h-r6rr Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory | 2% Низкий | больше 4 лет назад | |
| GHSA-wm4w-8vc6-2j4h Moodle XSS Vulnerability | CVSS3: 5.3 | 14% Средний | больше 4 лет назад |
| GHSA-wxqg-fg7v-mmc6 Moodle Authenticated Spelling Binary Remote Code Execution | 42% Средний | больше 4 лет назад | |
| GHSA-xhfw-wjjc-4j5h Moodle Cross-site Scripting | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-x5hj-47vv-53p8 YUI Cross-site Scripting (XSS) vulnerability | 1% Низкий | больше 4 лет назад | |
| GHSA-wp3g-pr4h-q6vv Moodle does not enforce capability requirements for reading blog comments | 2% Низкий | больше 4 лет назад | |
| GHSA-xj5f-qv37-r9jc Moodle Login CSRF vulnerability in login form | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
| GHSA-wpq5-q3mj-8f3r Moodle multiple cross-site request forgery (CSRF) vulnerabilities | 1% Низкий | больше 4 лет назад | |
| GHSA-227w-xh58-rx2j Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to hijack the authentication of arbitrary users for requests that send course messages. | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу