Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 535
GHSA-gp4w-f57r-9rx3
Moodle Exposure of Sensitive Information to an Unauthorized Actor
GHSA-m37g-mwcg-7j7v
Moodle Improper Encoding or Escaping of Output

CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service.
CVE-2021-40695
It was possible for a student to view their quiz grade before it had b ...

CVE-2021-40694
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
CVE-2021-40694
Insufficient escaping of the LaTeX preamble made it possible for site ...

CVE-2021-40693
An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.
CVE-2021-40693
An authentication bypass risk was identified in the external database ...

CVE-2021-40692
Insufficient capability checks made it possible for teachers to download users outside of their courses.
CVE-2021-40692
Insufficient capability checks made it possible for teachers to downlo ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
---|---|---|---|---|
GHSA-gp4w-f57r-9rx3 Moodle Exposure of Sensitive Information to an Unauthorized Actor | CVSS3: 4.3 | 0% Низкий | почти 3 года назад | |
GHSA-m37g-mwcg-7j7v Moodle Improper Encoding or Escaping of Output | CVSS3: 4.9 | 0% Низкий | почти 3 года назад | |
![]() | CVE-2021-40695 It was possible for a student to view their quiz grade before it had been released, using a quiz web service. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
CVE-2021-40695 It was possible for a student to view their quiz grade before it had b ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад | |
![]() | CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. | CVSS3: 4.9 | 0% Низкий | почти 3 года назад |
CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site ... | CVSS3: 4.9 | 0% Низкий | почти 3 года назад | |
![]() | CVE-2021-40693 An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability. | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
CVE-2021-40693 An authentication bypass risk was identified in the external database ... | CVSS3: 6.5 | 0% Низкий | почти 3 года назад | |
![]() | CVE-2021-40692 Insufficient capability checks made it possible for teachers to download users outside of their courses. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
CVE-2021-40692 Insufficient capability checks made it possible for teachers to downlo ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу