Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
GHSA-8fcv-4qp9-pg32
Moodle sends quiz-related messages to inactive/suspended users
GHSA-7f5w-xxw9-mqgp
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.
CVE-2025-62401
An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.
CVE-2025-62401
An issue in Moodle\u2019s timed assignment feature allowed students to ...
CVE-2025-62400
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
CVE-2025-62400
Moodle exposed the names of hidden groups to users who had permission ...
CVE-2025-62399
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
CVE-2025-62399
Moodle\u2019s mobile and web service authentication endpoints did not ...
CVE-2025-62398
A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.
CVE-2025-62398
A serious authentication flaw allowed attackers with valid credentials ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
GHSA-8fcv-4qp9-pg32 Moodle sends quiz-related messages to inactive/suspended users | CVSS3: 4.3 | 0% Низкий | 9 месяцев назад | |
GHSA-7f5w-xxw9-mqgp A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data. | CVSS3: 4.3 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62401 An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment. | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62401 An issue in Moodle\u2019s timed assignment feature allowed students to ... | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62400 Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information. | CVSS3: 4.3 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62400 Moodle exposed the names of hidden groups to users who had permission ... | CVSS3: 4.3 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62399 Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks. | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62399 Moodle\u2019s mobile and web service authentication endpoints did not ... | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62398 A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts. | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад | |
CVE-2025-62398 A serious authentication flaw allowed attackers with valid credentials ... | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад |
Уязвимостей на страницу