Логотип exploitDog
product: "moodle"
Консоль
Логотип exploitDog

exploitDog

product: "moodle"
Moodle

Moodleсистема управления образовательными электронными курсами

Релизный цикл, информация об уязвимостях

Продукт: Moodle
Вендор: moodle

График релизов

4.55.05.120242025202620272028

Недавние уязвимости Moodle

Количество 2 647

debian логотип

CVE-2025-62396

3 месяца назад

An error-handling issue in the Moodle router (r.php) could cause the a ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-62396

3 месяца назад

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2025-62395

3 месяца назад

A flaw in the cohort search web service allowed users with permissions ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-62395

3 месяца назад

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-62394

3 месяца назад

Moodle failed to verify enrolment status correctly when sending quiz n ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-62394

3 месяца назад

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-62393

3 месяца назад

A flaw was found in the course overview output function where user acc ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-62393

3 месяца назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2025-62393

3 месяца назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2025-62398

3 месяца назад

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2025-62396

An error-handling issue in the Moodle router (r.php) could cause the a ...

CVSS3: 5.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-62396

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

CVSS3: 5.3
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions ...

CVSS3: 4.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

CVSS3: 4.3
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-62394

Moodle failed to verify enrolment status correctly when sending quiz n ...

CVSS3: 4.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-62394

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

CVSS3: 4.3
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-62393

A flaw was found in the course overview output function where user acc ...

CVSS3: 4.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2025-62398

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

CVSS3: 5.4
0%
Низкий
3 месяца назад

Уязвимостей на страницу


Поделиться