Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2025-67849
A flaw was found in Moodle. This cross-site scripting (XSS) vulnerabil ...
CVE-2025-67857
A flaw was found in moodle. During anonymous assignment submissions, u ...
CVE-2025-67852
A flaw was found in Moodle. An open redirect vulnerability in the OAut ...
CVE-2025-67850
A flaw was found in moodle. This vulnerability, known as Cross-Site Sc ...
CVE-2025-67855
A flaw was found in mooodle. A remote attacker could exploit a reflect ...
CVE-2025-67853
A flaw was found in Moodle. A remote attacker could exploit a lack of ...
CVE-2025-67856
A flaw was found in Moodle. An authorization logic flaw, specifically ...
CVE-2025-67851
A flaw was found in moodle. This formula injection vulnerability occur ...
CVE-2025-67857
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
CVE-2025-67853
A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2025-67849 A flaw was found in Moodle. This cross-site scripting (XSS) vulnerabil ... | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67857 A flaw was found in moodle. During anonymous assignment submissions, u ... | CVSS3: 5.3 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67852 A flaw was found in Moodle. An open redirect vulnerability in the OAut ... | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67850 A flaw was found in moodle. This vulnerability, known as Cross-Site Sc ... | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67855 A flaw was found in mooodle. A remote attacker could exploit a reflect ... | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67853 A flaw was found in Moodle. A remote attacker could exploit a lack of ... | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67856 A flaw was found in Moodle. An authorization logic flaw, specifically ... | CVSS3: 9.8 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67851 A flaw was found in moodle. This formula injection vulnerability occur ... | CVSS3: 7.8 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67857 A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure. | CVSS3: 5.3 | 0% Низкий | 9 месяцев назад | |
CVE-2025-67853 A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts. | CVSS3: 7.5 | 0% Низкий | 9 месяцев назад |
Уязвимостей на страницу