Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2024-48897
A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.
CVE-2024-48901
A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.
CVE-2024-48896
A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site.
GHSA-x3x9-349x-2485
moodle: IDOR in edit/delete RSS feed
GHSA-cq5f-wv7p-5gfc
Moodle leaks user names
GHSA-mg54-p2wj-5ph7
moodle: IDOR when fetching report schedules
GHSA-fjq9-452g-jg3q
moodle: Some users can delete audiences of other reports
CVE-2024-48900
A vulnerability was found in Moodle. Additional checks are required to ...
CVE-2024-48900
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
CVE-2024-48900
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2024-48897 A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-48901 A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-48896 A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| GHSA-x3x9-349x-2485 moodle: IDOR in edit/delete RSS feed | CVSS3: 6.5 | 0% Низкий | почти 2 года назад |
| GHSA-cq5f-wv7p-5gfc Moodle leaks user names | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| GHSA-mg54-p2wj-5ph7 moodle: IDOR when fetching report schedules | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| GHSA-fjq9-452g-jg3q moodle: Some users can delete audiences of other reports | CVSS3: 6.5 | 0% Низкий | почти 2 года назад |
| CVE-2024-48900 A vulnerability was found in Moodle. Additional checks are required to ... | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
 | CVE-2024-48900 A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| CVE-2024-48900 A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу