Moodle — система управления образовательными электронными курсами

Moodle reveals student identities through assignment submissions search on anonymous submissions

Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users

Moodle has an IDOR in messaging web service which allows access to some user details

Moodle shows hidden grades to users without permission on some grade reports

Moodle makes some user data available before completing second factor with MFA enabled

Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository

Moodle has a CSRF risk in Brickfield tool's analysis request action

Moodle self enrollment available before completing second factor with MFA enabled

Moodle's mod_data edit/delete pages pass CSRF token in GET parameter

Moodle allows unauthenticated REST API user data exposure