Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
GHSA-j98x-965h-9v2h
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
GHSA-rgmc-f85q-83hm
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export
GHSA-x2p9-f5fv-m7m7
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
GHSA-wwrq-jww7-39jq
Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.
BDU:2022-03231
Уязвимость реализации класса core_search виртуальной обучающей среды Moodle, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2022-03179
Уязвимость реализации конфигурации moodle/badges:configurecriteria виртуальной обучающей среды Moodle, позволяющая нарушителю выполнить произвольный SQL-код
GHSA-h2fw-93qx-vrcq
SQL Injection in Moodle
CVE-2022-0983
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.
CVE-2022-0983
An SQL injection risk was identified in Badges code relating to config ...
CVE-2022-0983
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-j98x-965h-9v2h Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough | 1% Низкий | больше 4 лет назад | |
| GHSA-rgmc-f85q-83hm Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export | 1% Низкий | больше 4 лет назад | |
| GHSA-x2p9-f5fv-m7m7 Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to | 2% Низкий | больше 4 лет назад | |
| GHSA-wwrq-jww7-39jq Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs. | 2% Низкий | больше 4 лет назад | |
 | BDU:2022-03231 Уязвимость реализации класса core_search виртуальной обучающей среды Moodle, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| BDU:2022-03179 Уязвимость реализации конфигурации moodle/badges:configurecriteria виртуальной обучающей среды Moodle, позволяющая нарушителю выполнить произвольный SQL-код | CVSS3: 9.8 | 1% Низкий | больше 4 лет назад |
| GHSA-h2fw-93qx-vrcq SQL Injection in Moodle | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-0983 An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0983 An SQL injection risk was identified in Badges code relating to config ... | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-0983 An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу