Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 470

CVE-2023-28332
If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.
CVE-2023-28332
If the algebra filter was enabled but not functional (eg the necessary ...

CVE-2023-28331
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.
CVE-2023-28331
Content output by the database auto-linking filter required additional ...

CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read r ...

CVE-2023-28329
Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).
CVE-2023-28329
Insufficient validation of profile field availability condition result ...

CVE-2023-1402
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view.
CVE-2023-1402
The course participation report required additional checks to prevent ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
---|---|---|---|---|
![]() | CVE-2023-28332 If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk. | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад |
CVE-2023-28332 If the algebra filter was enabled but not functional (eg the necessary ... | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад | |
![]() | CVE-2023-28331 Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk. | CVSS3: 6.1 | 1% Низкий | больше 2 лет назад |
CVE-2023-28331 Content output by the database auto-linking filter required additional ... | CVSS3: 6.1 | 1% Низкий | больше 2 лет назад | |
![]() | CVE-2023-28330 Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
CVE-2023-28330 Insufficient sanitizing in backup resulted in an arbitrary file read r ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
![]() | CVE-2023-28329 Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers). | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
CVE-2023-28329 Insufficient validation of profile field availability condition result ... | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
![]() | CVE-2023-1402 The course participation report required additional checks to prevent roles being displayed which the user did not have access to view. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
CVE-2023-1402 The course participation report required additional checks to prevent ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу