Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Moodle

Moodleсистема управления образовательными электронными курсами

Релизный цикл, информация об уязвимостях

Продукт: Moodle
Вендор: moodle

График релизов

4.55.05.15.220242025202620272028

Недавние уязвимости Moodle

Количество 2 712

nvd логотип

CVE-2025-62397

9 месяцев назад

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2025-62397

9 месяцев назад

The router\u2019s inconsistent response to invalid course IDs allowed ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-62396

9 месяцев назад

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2025-62396

9 месяцев назад

An error-handling issue in the Moodle router (r.php) could cause the a ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-62395

9 месяцев назад

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-62395

9 месяцев назад

A flaw in the cohort search web service allowed users with permissions ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-62394

9 месяцев назад

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-62394

9 месяцев назад

Moodle failed to verify enrolment status correctly when sending quiz n ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-62393

9 месяцев назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-62393

9 месяцев назад

A flaw was found in the course overview output function where user acc ...

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2025-62397

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

CVSS3: 5.3
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-62397

The router\u2019s inconsistent response to invalid course IDs allowed ...

CVSS3: 5.3
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-62396

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

CVSS3: 5.3
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-62396

An error-handling issue in the Moodle router (r.php) could cause the a ...

CVSS3: 5.3
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

CVSS3: 4.3
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions ...

CVSS3: 4.3
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-62394

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

CVSS3: 4.3
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-62394

Moodle failed to verify enrolment status correctly when sending quiz n ...

CVSS3: 4.3
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-62393

A flaw was found in the course overview output function where user acc ...

CVSS3: 4.3
0%
Низкий
9 месяцев назад

Уязвимостей на страницу


Поделиться