Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
GHSA-q2x3-2f9g-h559
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
GHSA-786g-xv8v-9h93
Moodle Cross-site Scripting vulnerability
GHSA-2wmj-8mqg-r9q8
Moodle has Incorrect Default Permissions
GHSA-gv8f-43pg-c5qw
Moodle Improper Input Validation vulnerability
GHSA-j9cw-5cpj-9qj5
Moodle has a Hidden Functionality vulnerability
GHSA-35wf-3wq2-r3hx
Moodle has Incorrect Default Permissions
GHSA-79jp-m64f-pgrc
Moodle Cross-site Scripting vulnerability
GHSA-g6h6-4fp6-w33w
Moodle vulnerable to Stored Cross-site Scripting
CVE-2021-36398
In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk.
CVE-2021-36401
In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-q2x3-2f9g-h559 Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| GHSA-786g-xv8v-9h93 Moodle Cross-site Scripting vulnerability | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| GHSA-2wmj-8mqg-r9q8 Moodle has Incorrect Default Permissions | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-gv8f-43pg-c5qw Moodle Improper Input Validation vulnerability | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-j9cw-5cpj-9qj5 Moodle has a Hidden Functionality vulnerability | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-35wf-3wq2-r3hx Moodle has Incorrect Default Permissions | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-79jp-m64f-pgrc Moodle Cross-site Scripting vulnerability | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| GHSA-g6h6-4fp6-w33w Moodle vulnerable to Stored Cross-site Scripting | CVSS3: 4.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2021-36398 In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS risk. | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
| CVE-2021-36401 In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk. | CVSS3: 4.8 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу