Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 535
GHSA-hh52-g5c4-wprh
Moodle may allow authenticated users to enumerate other user's names via learning plans page
GHSA-9f45-9qrw-pp4v
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
GHSA-72w2-j52c-7682
Moodle SQL Injection vulnerability
GHSA-77jm-f3vj-xvx2
Moodle vulnerable to Cross-site Scripting
GHSA-56r9-72vx-q989
Moodle arbitrary file read vulnerability
GHSA-prjm-2fj2-787f
Moodle may allow teachers to access the names of users they could not otherwise access

CVE-2023-28336
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
CVE-2023-28336
Insufficient filtering of grade report history made it possible for te ...

CVE-2023-28335
The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.
CVE-2023-28335
The link to reset all templates of a database activity did not include ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
---|---|---|---|---|
GHSA-hh52-g5c4-wprh Moodle may allow authenticated users to enumerate other user's names via learning plans page | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
GHSA-9f45-9qrw-pp4v Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад | |
GHSA-72w2-j52c-7682 Moodle SQL Injection vulnerability | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад | |
GHSA-77jm-f3vj-xvx2 Moodle vulnerable to Cross-site Scripting | CVSS3: 6.1 | 1% Низкий | больше 2 лет назад | |
GHSA-56r9-72vx-q989 Moodle arbitrary file read vulnerability | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад | |
GHSA-prjm-2fj2-787f Moodle may allow teachers to access the names of users they could not otherwise access | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
![]() | CVE-2023-28336 Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
CVE-2023-28336 Insufficient filtering of grade report history made it possible for te ... | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад | |
![]() | CVE-2023-28335 The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
CVE-2023-28335 The link to reset all templates of a database activity did not include ... | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу