Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
GHSA-68x5-4jg5-gjgg
Moodle CSRF risk in analytics management of models
GHSA-gq9f-8rj4-w7jc
Moodle CSRF risk in admin preset tool management of presets
GHSA-8qwh-4vwv-7c5m
Moodle Cross-site Scripting (XSS)
GHSA-r2wx-46gp-rp3h
Moodle Improper Input Validation
GHSA-xqhh-253w-4q5f
Moodle Cross-site Scripting (XSS)
GHSA-4qww-rxq6-x7gf
Moodle broken access control when setting calendar event type
GHSA-9qgq-93c7-9hm4
Moodle stored Cross-site Scripting (XSS)
CVE-2024-34009
Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized.
CVE-2024-34009
Insufficient checks whether ReCAPTCHA was enabled made it possible to ...
CVE-2024-34008
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-68x5-4jg5-gjgg Moodle CSRF risk in analytics management of models | CVSS3: 8.8 | 0% Низкий | около 2 лет назад |
| GHSA-gq9f-8rj4-w7jc Moodle CSRF risk in admin preset tool management of presets | CVSS3: 8.4 | 0% Низкий | около 2 лет назад |
| GHSA-8qwh-4vwv-7c5m Moodle Cross-site Scripting (XSS) | CVSS3: 4.3 | 0% Низкий | около 2 лет назад |
| GHSA-r2wx-46gp-rp3h Moodle Improper Input Validation | 1% Низкий | около 2 лет назад | |
| GHSA-xqhh-253w-4q5f Moodle Cross-site Scripting (XSS) | CVSS3: 5.4 | 0% Низкий | около 2 лет назад |
| GHSA-4qww-rxq6-x7gf Moodle broken access control when setting calendar event type | CVSS3: 6.2 | 0% Низкий | около 2 лет назад |
| GHSA-9qgq-93c7-9hm4 Moodle stored Cross-site Scripting (XSS) | CVSS3: 6.1 | 0% Низкий | около 2 лет назад |
 | CVE-2024-34009 Insufficient checks whether ReCAPTCHA was enabled made it possible to bypass the checks on the login page. This did not affect other pages where ReCAPTCHA is utilized. | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| CVE-2024-34009 Insufficient checks whether ReCAPTCHA was enabled made it possible to ... | CVSS3: 7.5 | 0% Низкий | около 2 лет назад |
| CVE-2024-34008 Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.8 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу