Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2021-36393
In Moodle, an SQL injection risk was identified in the library fetchin ...
CVE-2021-36392
In Moodle, an SQL injection risk was identified in the library fetchin ...
GHSA-qc86-vgf2-6fq6
Moodle SQL Injection vulnerability
GHSA-f46j-r7q3-6cm2
Moodle SQL Injection vulnerability
GHSA-273w-7fxj-pcp6
Moodle vulnerable to Uncontrolled Resource Consumption
GHSA-2563-fp9c-mgm8
Moodle Session Fixation vulnerability
GHSA-4rmj-w58m-fvch
Moodle vulnerable to Server-Side Request Forgery
CVE-2021-36403
In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.
CVE-2021-36395
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.
CVE-2021-36394
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2021-36393 In Moodle, an SQL injection risk was identified in the library fetchin ... | CVSS3: 9.8 | 52% Средний | больше 3 лет назад |
| CVE-2021-36392 In Moodle, an SQL injection risk was identified in the library fetchin ... | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| GHSA-qc86-vgf2-6fq6 Moodle SQL Injection vulnerability | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| GHSA-f46j-r7q3-6cm2 Moodle SQL Injection vulnerability | CVSS3: 9.8 | 52% Средний | больше 3 лет назад |
| GHSA-273w-7fxj-pcp6 Moodle vulnerable to Uncontrolled Resource Consumption | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| GHSA-2563-fp9c-mgm8 Moodle Session Fixation vulnerability | CVSS3: 9.8 | 7% Низкий | больше 3 лет назад |
| GHSA-4rmj-w58m-fvch Moodle vulnerable to Server-Side Request Forgery | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2021-36403 In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk. | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| CVE-2021-36395 In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2021-36394 In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin. | CVSS3: 9.8 | 7% Низкий | больше 3 лет назад |
Уязвимостей на страницу