Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
GHSA-vvh5-7v3m-j3mj
Moodle Unsanitized HTML in site log for config_log_created
BDU:2024-05157
Уязвимость системы управления Moodle, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнять произвольные команды
CVE-2024-28593
The Chat activity in Moodle 4.3.3 allows students to insert a potentia ...
CVE-2024-28593
The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle."
CVE-2024-28593
The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle."
GHSA-f6mh-79vh-2hv7
Cross-site Scripting in Moodle Chat
CVE-2024-29374
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
CVE-2024-29374
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3. ...
CVE-2024-29374
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
CVE-2024-29374
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-vvh5-7v3m-j3mj Moodle Unsanitized HTML in site log for config_log_created | CVSS3: 4.3 | 0% Низкий | больше 2 лет назад |
 | BDU:2024-05157 Уязвимость системы управления Moodle, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнять произвольные команды | CVSS3: 6.2 | 0% Низкий | больше 2 лет назад |
| CVE-2024-28593 The Chat activity in Moodle 4.3.3 allows students to insert a potentia ... | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-28593 The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle." | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-28593 The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle." | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| GHSA-f6mh-79vh-2hv7 Cross-site Scripting in Moodle Chat | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-29374 A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter. | CVSS3: 6.5 | 1% Низкий | больше 2 лет назад |
| CVE-2024-29374 A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3. ... | CVSS3: 6.1 | 1% Низкий | больше 2 лет назад |
| CVE-2024-29374 A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter. | CVSS3: 6.1 | 1% Низкий | больше 2 лет назад |
| CVE-2024-29374 A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter. | CVSS3: 6.1 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу