Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 647
CVE-2018-10891
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ...
CVE-2018-10890
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.
CVE-2018-10890
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ...
CVE-2018-10889
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.
CVE-2018-10889
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No opt ...
CVE-2018-10891
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank.
CVE-2018-10890
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.
CVE-2018-10889
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.
CVE-2018-1137
An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.
CVE-2018-1137
An issue was discovered in Moodle 3.x. By substituting URLs in portfol ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2018-10891 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ... | CVSS3: 7.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10890 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories. | CVSS3: 4.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10890 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ... | CVSS3: 4.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10889 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester. | CVSS3: 4.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10889 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No opt ... | CVSS3: 4.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10891 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank. | CVSS3: 7.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10890 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories. | CVSS3: 4.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-10889 A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester. | CVSS3: 4.3 | 0% Низкий | больше 7 лет назад | |
CVE-2018-1137 An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack. | CVSS3: 8.1 | 0% Низкий | больше 7 лет назад | |
CVE-2018-1137 An issue was discovered in Moodle 3.x. By substituting URLs in portfol ... | CVSS3: 8.1 | 0% Низкий | больше 7 лет назад |
Уязвимостей на страницу