Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 541
GHSA-267j-cwvg-j28c
Moodle attackers to modify grade metadata
GHSA-8rc7-4qfv-4484
Moodle does not properly restrict file access
GHSA-4wvg-7886-83gv
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-xhg2-vjrc-jqj8
repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to an incorrect CURLOPT_SSL_VERIFYHOST value.
GHSA-48rq-vj58-2mh6
Moodle creates a MoodleMobile web-service token with an infinite lifetime
GHSA-6p3g-hw27-qh44
Moodle's time-validation implementation allows bypassing intended restrictions
GHSA-2fmv-j5xj-4fmq
Moodle Reveals Student Information Meant To Be Anonymous
GHSA-fc5p-vj3h-x7g4
Moodle allows attackers to obtain sensitive information
GHSA-f9m9-494r-w36p
Moodle allows bypass of intended access restrictions
GHSA-j465-7mp6-3xg3
Moodle places a session key in a URL
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-267j-cwvg-j28c Moodle attackers to modify grade metadata | 0% Низкий | больше 3 лет назад | |
| GHSA-8rc7-4qfv-4484 Moodle does not properly restrict file access | 0% Низкий | больше 3 лет назад | |
| GHSA-4wvg-7886-83gv Moodle cross-site request forgery (CSRF) vulnerability | 0% Низкий | больше 3 лет назад | |
| GHSA-xhg2-vjrc-jqj8 repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to an incorrect CURLOPT_SSL_VERIFYHOST value. | 0% Низкий | больше 3 лет назад | |
| GHSA-48rq-vj58-2mh6 Moodle creates a MoodleMobile web-service token with an infinite lifetime | 0% Низкий | больше 3 лет назад | |
| GHSA-6p3g-hw27-qh44 Moodle's time-validation implementation allows bypassing intended restrictions | 0% Низкий | больше 3 лет назад | |
| GHSA-2fmv-j5xj-4fmq Moodle Reveals Student Information Meant To Be Anonymous | 0% Низкий | больше 3 лет назад | |
| GHSA-fc5p-vj3h-x7g4 Moodle allows attackers to obtain sensitive information | 0% Низкий | больше 3 лет назад | |
| GHSA-f9m9-494r-w36p Moodle allows bypass of intended access restrictions | 0% Низкий | больше 3 лет назад | |
| GHSA-j465-7mp6-3xg3 Moodle places a session key in a URL | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу