Moodle — система управления образовательными электронными курсами

Improper Access Control in moodle

Authorization Bypass in moodle

Improper Handling of Parameters in moodle

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).

Insufficient checks in a web service made it possible to add comments ...

The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.

The link to update all installed language packs did not include the ne ...

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.

Separate Groups mode restrictions were not honored when performing a f ...

Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.