Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 470
CVE-2023-46858
Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."
CVE-2023-46858
Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflecte ...
CVE-2023-46858
** DISPUTED ** Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."
GHSA-xxp4-mf4h-6cwm
Moodle vulnerable to Server Side Request Forgery
GHSA-49mv-vfcp-8gg9
Moodle vulnerable to SQL Injection
GHSA-fwfj-8p36-rc64
Moodle vulnerable to Cross-site Scripting
CVE-2023-35133
An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
CVE-2023-35133
An issue in the logic used to check 0.0.0.0 against the cURL blocked h ...
CVE-2023-35132
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
CVE-2023-35132
A limited SQL injection risk was identified on the Mnet SSO access con ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2023-46858 Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not." | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| CVE-2023-46858 Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflecte ... | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
 | CVE-2023-46858 ** DISPUTED ** Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not." | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| GHSA-xxp4-mf4h-6cwm Moodle vulnerable to Server Side Request Forgery | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| GHSA-49mv-vfcp-8gg9 Moodle vulnerable to SQL Injection | CVSS3: 6.3 | 0% Низкий | около 2 лет назад |
| GHSA-fwfj-8p36-rc64 Moodle vulnerable to Cross-site Scripting | CVSS3: 6.1 | 1% Низкий | около 2 лет назад |
| CVE-2023-35133 An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions. | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-35133 An issue in the logic used to check 0.0.0.0 against the cURL blocked h ... | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-35132 A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions. | CVSS3: 6.3 | 0% Низкий | около 2 лет назад |
| CVE-2023-35132 A limited SQL injection risk was identified on the Mnet SSO access con ... | CVSS3: 6.3 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу