Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2021-32473
It was possible for a student to view their quiz grade before it had b ...
CVE-2021-32477
The last time a user accessed the mobile app is displayed on their pro ...
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sa ...
CVE-2021-32478
The redirect URI in the LTI authorization endpoint required extra sani ...
CVE-2021-32476
A denial-of-service risk was identified in the draft files area, due t ...
CVE-2021-32472
Teachers exporting a forum in CSV format could receive a CSV of forums ...
CVE-2021-32474
An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
CVE-2021-32477
The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.
CVE-2021-32473
It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected
CVE-2021-32475
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2021-32473 It was possible for a student to view their quiz grade before it had b ... | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32477 The last time a user accessed the mobile app is displayed on their pro ... | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32475 ID numbers displayed in the quiz grading report required additional sa ... | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32478 The redirect URI in the LTI authorization endpoint required extra sani ... | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32476 A denial-of-service risk was identified in the draft files area, due t ... | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32472 Teachers exporting a forum in CSV format could receive a CSV of forums ... | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
 | CVE-2021-32474 An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. | CVSS3: 7.2 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32477 The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32473 It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| CVE-2021-32475 ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу