Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
CVE-2024-43427
A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.
GHSA-wwjf-gwrv-wh45
Moodle's IDOR in badges allows deletion of arbitrary badges
GHSA-mx26-62xm-2p83
Moodle vulnerable to site administration SQL injection via XMLDB editor
GHSA-x87r-37q5-mmr8
Moodle has CSRF risk in Feedback non-respondents report
GHSA-p9cx-f595-h79h
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
GHSA-qrqv-26gf-xgwh
Moodle LFI vulnerability when restoring malformed block backups
GHSA-v6f4-v8h8-3c87
Moodle Remote Code Execution vulnerability
GHSA-vjmm-r9gg-425m
Moodle has arbitrary file read risk through pdfTeX
GHSA-2r9m-wg35-rfvc
Moodle vulnerable to cache poisoning via injection into storage
CVE-2024-43440
A flaw was found in moodle. A local file may include risks when restoring block backups.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2024-43427 A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party. | CVSS3: 3.7 | 0% Низкий | больше 1 года назад |
| GHSA-wwjf-gwrv-wh45 Moodle's IDOR in badges allows deletion of arbitrary badges | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| GHSA-mx26-62xm-2p83 Moodle vulnerable to site administration SQL injection via XMLDB editor | CVSS3: 7.2 | 1% Низкий | больше 1 года назад |
| GHSA-x87r-37q5-mmr8 Moodle has CSRF risk in Feedback non-respondents report | CVSS3: 8.1 | 1% Низкий | больше 1 года назад |
| GHSA-p9cx-f595-h79h Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| GHSA-qrqv-26gf-xgwh Moodle LFI vulnerability when restoring malformed block backups | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| GHSA-v6f4-v8h8-3c87 Moodle Remote Code Execution vulnerability | CVSS3: 8.1 | 83% Высокий | больше 1 года назад |
| GHSA-vjmm-r9gg-425m Moodle has arbitrary file read risk through pdfTeX | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| GHSA-2r9m-wg35-rfvc Moodle vulnerable to cache poisoning via injection into storage | CVSS3: 7.7 | 0% Низкий | больше 1 года назад |
 | CVE-2024-43440 A flaw was found in moodle. A local file may include risks when restoring block backups. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу