Moodle — система управления образовательными электронными курсами

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.

A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks. Specifically, users can sign up for courses prematurely, even if they haven't finished two-step verification processes.

A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks.

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.

Moodle allows IDOR when accessing the cohorts report

Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository

Moodle has a CSRF risk in user tours manager that allows tour duplication

Moodle allows IDOR in RSS block, which allows access to additional RSS feeds

Moodle has reflected Cross-site Scripting risk in policy tool