Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 535
CVE-2023-28332
If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk.
CVE-2023-28336
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
CVE-2023-28333
The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).
GHSA-2wmj-8mqg-r9q8
Moodle has Incorrect Default Permissions
GHSA-786g-xv8v-9h93
Moodle Cross-site Scripting vulnerability
GHSA-79jp-m64f-pgrc
Moodle Cross-site Scripting vulnerability
GHSA-j9cw-5cpj-9qj5
Moodle has a Hidden Functionality vulnerability
GHSA-g6h6-4fp6-w33w
Moodle vulnerable to Stored Cross-site Scripting
GHSA-35wf-3wq2-r3hx
Moodle has Incorrect Default Permissions
GHSA-gv8f-43pg-c5qw
Moodle Improper Input Validation vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2023-28332 If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk. | CVSS3: 6.1 | 0% Низкий | больше 2 лет назад |
| CVE-2023-28336 Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access. | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
| CVE-2023-28333 The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS). | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
| GHSA-2wmj-8mqg-r9q8 Moodle has Incorrect Default Permissions | CVSS3: 5.3 | 0% Низкий | больше 2 лет назад |
| GHSA-786g-xv8v-9h93 Moodle Cross-site Scripting vulnerability | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| GHSA-79jp-m64f-pgrc Moodle Cross-site Scripting vulnerability | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| GHSA-j9cw-5cpj-9qj5 Moodle has a Hidden Functionality vulnerability | CVSS3: 5.3 | 0% Низкий | больше 2 лет назад |
| GHSA-g6h6-4fp6-w33w Moodle vulnerable to Stored Cross-site Scripting | CVSS3: 4.8 | 0% Низкий | больше 2 лет назад |
| GHSA-35wf-3wq2-r3hx Moodle has Incorrect Default Permissions | CVSS3: 5.3 | 0% Низкий | больше 2 лет назад |
| GHSA-gv8f-43pg-c5qw Moodle Improper Input Validation vulnerability | CVSS3: 5.3 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу