Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 499
GHSA-9r26-5w88-qhp9
Authorization Bypass in moodle
GHSA-7pjp-fm93-p6pj
Cross-Site Request Forgery in moodle
GHSA-cp8m-h777-g4p3
Improper Access Control in moodle
GHSA-6vjf-48fh-vxxj
Improper Handling of Parameters in moodle
GHSA-487g-3m3v-hjhq
Uncontrolled Resource Consumption in moodle
GHSA-jfrg-9hpq-9hvp
Improper Access Control in moodle
CVE-2024-25983
Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).
CVE-2024-25983
Insufficient checks in a web service made it possible to add comments ...
CVE-2024-25982
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
CVE-2024-25982
The link to update all installed language packs did not include the ne ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-9r26-5w88-qhp9 Authorization Bypass in moodle | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
| GHSA-7pjp-fm93-p6pj Cross-Site Request Forgery in moodle | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
| GHSA-cp8m-h777-g4p3 Improper Access Control in moodle | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
| GHSA-6vjf-48fh-vxxj Improper Handling of Parameters in moodle | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
| GHSA-487g-3m3v-hjhq Uncontrolled Resource Consumption in moodle | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| GHSA-jfrg-9hpq-9hvp Improper Access Control in moodle | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
 | CVE-2024-25983 Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page). | CVSS3: 3.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-25983 Insufficient checks in a web service made it possible to add comments ... | CVSS3: 3.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-25982 The link to update all installed language packs did not include the necessary token to prevent a CSRF risk. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| CVE-2024-25982 The link to update all installed language packs did not include the ne ... | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу