Moodle — система управления образовательными электронными курсами

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

A flaw in the cohort search web service allowed users with permissions ...

The router\u2019s inconsistent response to invalid course IDs allowed ...

A flaw was found in the course overview output function where user acc ...

Moodle\u2019s mobile and web service authentication endpoints did not ...

An issue in Moodle\u2019s timed assignment feature allowed students to ...

A serious authentication flaw allowed attackers with valid credentials ...