Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 645
GHSA-wxmq-v9gx-75pg
Moodle vulnerable to Cross-site Request Forgery
GHSA-72w2-j52c-7682
Moodle SQL Injection vulnerability
GHSA-9f45-9qrw-pp4v
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
GHSA-77jm-f3vj-xvx2
Moodle vulnerable to Cross-site Scripting
GHSA-q2x3-2f9g-h559
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
GHSA-prjm-2fj2-787f
Moodle may allow teachers to access the names of users they could not otherwise access
CVE-2023-28336
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
CVE-2023-28336
Insufficient filtering of grade report history made it possible for te ...
CVE-2023-28335
The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.
CVE-2023-28335
The link to reset all templates of a database activity did not include ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
GHSA-wxmq-v9gx-75pg Moodle vulnerable to Cross-site Request Forgery | CVSS3: 8.8 | 0% Низкий | почти 3 года назад | |
GHSA-72w2-j52c-7682 Moodle SQL Injection vulnerability | CVSS3: 8.8 | 0% Низкий | почти 3 года назад | |
GHSA-9f45-9qrw-pp4v Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional | CVSS3: 6.1 | 1% Низкий | почти 3 года назад | |
GHSA-77jm-f3vj-xvx2 Moodle vulnerable to Cross-site Scripting | CVSS3: 6.1 | 1% Низкий | почти 3 года назад | |
GHSA-q2x3-2f9g-h559 Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input | CVSS3: 9.8 | 1% Низкий | почти 3 года назад | |
GHSA-prjm-2fj2-787f Moodle may allow teachers to access the names of users they could not otherwise access | CVSS3: 4.3 | 0% Низкий | почти 3 года назад | |
CVE-2023-28336 Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад | |
CVE-2023-28336 Insufficient filtering of grade report history made it possible for te ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад | |
CVE-2023-28335 The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.8 | 0% Низкий | почти 3 года назад | |
CVE-2023-28335 The link to reset all templates of a database activity did not include ... | CVSS3: 8.8 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу