Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
GHSA-3jfw-v39g-268j
Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding.
GHSA-j5rc-cr5w-vfg6
Moodle Session Fixation vulnerability
GHSA-37mm-gc69-pw8r
Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title).
GHSA-hhxf-w8hj-43w6
Moodle vulnerable to Cross-site Scripting
GHSA-966m-m549-2878
Moodle is vulnerable to unauthorized new accounts creation
GHSA-7cvw-wrj9-q5fp
Moodle vulnerable to Cross-Site Request Forgery
GHSA-q53j-c866-h9mw
Moodle doesn't properly check role
GHSA-5fgv-cvr8-xg48
Moodle vulnerable to Cross-site Scripting
GHSA-cx8w-wqgc-mpmh
Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository.
GHSA-7xv5-m4rh-f939
Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-3jfw-v39g-268j Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding. | 1% Низкий | около 4 лет назад | |
| GHSA-j5rc-cr5w-vfg6 Moodle Session Fixation vulnerability | 2% Низкий | около 4 лет назад | |
| GHSA-37mm-gc69-pw8r Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title). | 2% Низкий | около 4 лет назад | |
| GHSA-hhxf-w8hj-43w6 Moodle vulnerable to Cross-site Scripting | 2% Низкий | около 4 лет назад | |
| GHSA-966m-m549-2878 Moodle is vulnerable to unauthorized new accounts creation | 1% Низкий | около 4 лет назад | |
| GHSA-7cvw-wrj9-q5fp Moodle vulnerable to Cross-Site Request Forgery | 1% Низкий | около 4 лет назад | |
| GHSA-q53j-c866-h9mw Moodle doesn't properly check role | 2% Низкий | около 4 лет назад | |
| GHSA-5fgv-cvr8-xg48 Moodle vulnerable to Cross-site Scripting | 2% Низкий | около 4 лет назад | |
| GHSA-cx8w-wqgc-mpmh Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository. | 1% Низкий | около 4 лет назад | |
| GHSA-7xv5-m4rh-f939 Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action. | 2% Низкий | около 4 лет назад |
Уязвимостей на страницу