Поиск уязвимостей
Количество 5
Количество 5
CVE-2026-102588
A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization.
CVE-2026-102588
A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization.
CVE-2026-102588
A flaw was found in Moodle. The XML grade import feature lacks proper ...
GHSA-w3pq-x3mm-4hh9
A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization.
ALT-PU-2026-12636
ALT-PU-2026-12636: package `moodle` update to version 5.2.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-102588 A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-102588 A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-102588 A flaw was found in Moodle. The XML grade import feature lacks proper ... | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| GHSA-w3pq-x3mm-4hh9 A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| ALT-PU-2026-12636 ALT-PU-2026-12636: package `moodle` update to version 5.2.2-alt1 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу