Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 470
CVE-2022-40314
A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.
CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page.
CVE-2022-40316
The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.
GHSA-wr6q-xv23-rfq9
Moodle Incorrect Authorization
GHSA-92vh-mr2w-j2cr
Moodle Improper Authentication
GHSA-2jxg-mv2m-j4r7
Moodle type juggling vulnerability
GHSA-gp4w-f57r-9rx3
Moodle Exposure of Sensitive Information to an Unauthorized Actor
GHSA-m37g-mwcg-7j7v
Moodle Improper Encoding or Escaping of Output
CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service.
CVE-2021-40695
It was possible for a student to view their quiz grade before it had b ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2022-40314 A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified. | CVSS3: 9.8 | 11% Средний | почти 3 года назад |
| CVE-2022-40315 A limited SQL injection risk was identified in the "browse list of users" site administration page. | CVSS3: 9.8 | 0% Низкий | почти 3 года назад |
| CVE-2022-40316 The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| GHSA-wr6q-xv23-rfq9 Moodle Incorrect Authorization | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| GHSA-92vh-mr2w-j2cr Moodle Improper Authentication | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| GHSA-2jxg-mv2m-j4r7 Moodle type juggling vulnerability | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
| GHSA-gp4w-f57r-9rx3 Moodle Exposure of Sensitive Information to an Unauthorized Actor | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| GHSA-m37g-mwcg-7j7v Moodle Improper Encoding or Escaping of Output | CVSS3: 4.9 | 0% Низкий | почти 3 года назад |
 | CVE-2021-40695 It was possible for a student to view their quiz grade before it had been released, using a quiz web service. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| CVE-2021-40695 It was possible for a student to view their quiz grade before it had b ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу