Moodle — система управления образовательными электронными курсами

Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository

Moodle has a CSRF risk in user tours manager that allows tour duplication

Moodle has an IDOR in messaging web service which allows access to some user details

Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository

Moodle has a CSRF risk in Brickfield tool's analysis request action

Moodle has reflected Cross-site Scripting risk in policy tool

Moodle allows IDOR in RSS block, which allows access to additional RSS feeds

Moodle shows hidden grades to users without permission on some grade reports

Moodle makes some user data available before completing second factor with MFA enabled

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).