Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2025-26528
The drag-and-drop onto image (ddimageortext) question type required ad ...
CVE-2025-26525
Insufficient sanitizing in the TeX notation filter resulted in an arb ...
CVE-2025-26529
Description information displayed in the site administration live log ...
CVE-2025-26527
Tags not expected to be visible to a user could still be discovered by ...
CVE-2025-26532
Additional checks were required to ensure trusttext is applied (when e ...
CVE-2025-26530
The question bank filter required additional sanitizing to prevent a r ...
CVE-2025-26526
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.
CVE-2025-26529
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
CVE-2025-26528
The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.
CVE-2025-26527
Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2025-26528 The drag-and-drop onto image (ddimageortext) question type required ad ... | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-26525 Insufficient sanitizing in the TeX notation filter resulted in an arb ... | CVSS3: 8.6 | 0% Низкий | больше 1 года назад | |
CVE-2025-26529 Description information displayed in the site administration live log ... | CVSS3: 6.1 | 1% Низкий | больше 1 года назад | |
CVE-2025-26527 Tags not expected to be visible to a user could still be discovered by ... | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26532 Additional checks were required to ensure trusttext is applied (when e ... | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26530 The question bank filter required additional sanitizing to prevent a r ... | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-26526 Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities. | CVSS3: 6.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-26529 Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk. | CVSS3: 6.1 | 1% Низкий | больше 1 года назад | |
CVE-2025-26528 The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-26527 Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу