Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 577
CVE-2021-32476
A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
CVE-2021-32476
A denial-of-service risk was identified in the draft files area, due t ...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sa ...
CVE-2021-32474
An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
CVE-2021-32474
An SQL injection risk existed on sites with MNet enabled and configure ...
CVE-2021-32473
It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected
CVE-2021-32473
It was possible for a student to view their quiz grade before it had b ...
CVE-2021-32472
Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected.
CVE-2021-32472
Teachers exporting a forum in CSV format could receive a CSV of forums ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2021-32476 A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2021-32476 A denial-of-service risk was identified in the draft files area, due t ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2021-32475 ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| CVE-2021-32475 ID numbers displayed in the quiz grading report required additional sa ... | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| CVE-2021-32474 An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. | CVSS3: 7.2 | 1% Низкий | больше 3 лет назад |
| CVE-2021-32474 An SQL injection risk existed on sites with MNet enabled and configure ... | CVSS3: 7.2 | 1% Низкий | больше 3 лет назад |
| CVE-2021-32473 It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected | CVSS3: 5.3 | 0% Низкий | больше 3 лет назад |
| CVE-2021-32473 It was possible for a student to view their quiz grade before it had b ... | CVSS3: 5.3 | 0% Низкий | больше 3 лет назад |
| CVE-2021-32472 Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected. | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| CVE-2021-32472 Teachers exporting a forum in CSV format could receive a CSV of forums ... | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу