Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 541
CVE-2024-43437
A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.
GHSA-qrqv-26gf-xgwh
Moodle LFI vulnerability when restoring malformed block backups
GHSA-2r9m-wg35-rfvc
Moodle vulnerable to cache poisoning via injection into storage
GHSA-p9cx-f595-h79h
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
GHSA-mx26-62xm-2p83
Moodle vulnerable to site administration SQL injection via XMLDB editor
GHSA-vjmm-r9gg-425m
Moodle has arbitrary file read risk through pdfTeX
GHSA-v6f4-v8h8-3c87
Moodle Remote Code Execution vulnerability
GHSA-wwjf-gwrv-wh45
Moodle's IDOR in badges allows deletion of arbitrary badges
GHSA-x87r-37q5-mmr8
Moodle has CSRF risk in Feedback non-respondents report
CVE-2024-43440
A flaw was found in moodle. A local file may include risks when restoring block backups.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2024-43437 A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files. | CVSS3: 5.4 | 1% Низкий | 12 месяцев назад |
| GHSA-qrqv-26gf-xgwh Moodle LFI vulnerability when restoring malformed block backups | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад |
| GHSA-2r9m-wg35-rfvc Moodle vulnerable to cache poisoning via injection into storage | CVSS3: 7.7 | 0% Низкий | 12 месяцев назад |
| GHSA-p9cx-f595-h79h Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад |
| GHSA-mx26-62xm-2p83 Moodle vulnerable to site administration SQL injection via XMLDB editor | CVSS3: 7.2 | 0% Низкий | 12 месяцев назад |
| GHSA-vjmm-r9gg-425m Moodle has arbitrary file read risk through pdfTeX | CVSS3: 7.5 | 1% Низкий | 12 месяцев назад |
| GHSA-v6f4-v8h8-3c87 Moodle Remote Code Execution vulnerability | CVSS3: 8.1 | 90% Высокий | 12 месяцев назад |
| GHSA-wwjf-gwrv-wh45 Moodle's IDOR in badges allows deletion of arbitrary badges | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад |
| GHSA-x87r-37q5-mmr8 Moodle has CSRF risk in Feedback non-respondents report | CVSS3: 8.1 | 0% Низкий | 12 месяцев назад |
 | CVE-2024-43440 A flaw was found in moodle. A local file may include risks when restoring block backups. | CVSS3: 7.5 | 0% Низкий | 12 месяцев назад |
Уязвимостей на страницу