Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2024-25982
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
CVE-2024-25981
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
GHSA-9r26-5w88-qhp9
Authorization Bypass in moodle
GHSA-7pjp-fm93-p6pj
Cross-Site Request Forgery in moodle
GHSA-cp8m-h777-g4p3
Improper Access Control in moodle
GHSA-487g-3m3v-hjhq
Uncontrolled Resource Consumption in moodle
GHSA-6vjf-48fh-vxxj
Improper Handling of Parameters in moodle
GHSA-jfrg-9hpq-9hvp
Improper Access Control in moodle
CVE-2024-1439
Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.
CVE-2024-1439
Inadequate access control in Moodle LMS. This vulnerability could allo ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2024-25982 The link to update all installed language packs did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| CVE-2024-25981 Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| GHSA-9r26-5w88-qhp9 Authorization Bypass in moodle | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| GHSA-7pjp-fm93-p6pj Cross-Site Request Forgery in moodle | CVSS3: 8.8 | 1% Низкий | больше 2 лет назад |
| GHSA-cp8m-h777-g4p3 Improper Access Control in moodle | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| GHSA-487g-3m3v-hjhq Uncontrolled Resource Consumption in moodle | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
| GHSA-6vjf-48fh-vxxj Improper Handling of Parameters in moodle | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| GHSA-jfrg-9hpq-9hvp Improper Access Control in moodle | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| CVE-2024-1439 Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent. | CVSS3: 3.3 | 0% Низкий | больше 2 лет назад |
| CVE-2024-1439 Inadequate access control in Moodle LMS. This vulnerability could allo ... | CVSS3: 3.3 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу