Количество 2 643
Количество 2 643
GHSA-j98x-965h-9v2h
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
GHSA-j8wr-7xxj-c2fr
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions
GHSA-j822-x5gg-5r56
Moodle allows users to retrieve information they did not have permission to access
GHSA-j5xf-gv89-g422
Moodle Cross-site Scripting vulnerability
GHSA-j5rc-cr5w-vfg6
Moodle Session Fixation vulnerability
GHSA-j4mr-vc54-h5pc
Moodle cross-site scripting (XSS) vulnerability
GHSA-j465-7mp6-3xg3
Moodle places a session key in a URL
GHSA-j3x5-cwfj-pfcw
Moodle does not force password changes for autosubscribed users
GHSA-hxvf-5p7c-7g55
lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field.
GHSA-hxmp-8f47-x9fc
Moodle Open Redirect Via Error Messages
GHSA-hxgg-4qww-85ph
Moodle has reflected Cross-site Scripting risk in policy tool
GHSA-hwjw-22qj-gpvc
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
GHSA-hwjv-mc78-cccj
Moodle multiple cross-site scripting (XSS) vulnerabilities
GHSA-hpwm-84h5-vqr8
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames
GHSA-hpmv-wvq3-gj27
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-hp4v-c3h7-rwmx
mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.
GHSA-hjrj-7wcj-7j3c
Moodle sensitive information disclosure
GHSA-hjgc-jxjc-8v9j
Moodle reflected XSS via H5P error message
GHSA-hj48-8q8c-q7g9
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
GHSA-hhxf-w8hj-43w6
Moodle vulnerable to Cross-site Scripting
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-j98x-965h-9v2h Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough | 0% Низкий | больше 3 лет назад | |
| GHSA-j8wr-7xxj-c2fr Moodle Private files uploaded via incoming mail processing could bypass quota restrictions | CVSS3: 4.2 | 0% Низкий | больше 3 лет назад |
| GHSA-j822-x5gg-5r56 Moodle allows users to retrieve information they did not have permission to access | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| GHSA-j5xf-gv89-g422 Moodle Cross-site Scripting vulnerability | CVSS3: 5.4 | 0% Низкий | около 2 лет назад |
| GHSA-j5rc-cr5w-vfg6 Moodle Session Fixation vulnerability | 0% Низкий | больше 3 лет назад | |
| GHSA-j4mr-vc54-h5pc Moodle cross-site scripting (XSS) vulnerability | 0% Низкий | больше 3 лет назад | |
| GHSA-j465-7mp6-3xg3 Moodle places a session key in a URL | 0% Низкий | больше 3 лет назад | |
| GHSA-j3x5-cwfj-pfcw Moodle does not force password changes for autosubscribed users | 0% Низкий | больше 3 лет назад | |
| GHSA-hxvf-5p7c-7g55 lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field. | 0% Низкий | больше 3 лет назад | |
| GHSA-hxmp-8f47-x9fc Moodle Open Redirect Via Error Messages | 0% Низкий | больше 3 лет назад | |
| GHSA-hxgg-4qww-85ph Moodle has reflected Cross-site Scripting risk in policy tool | CVSS3: 5.4 | 0% Низкий | 8 месяцев назад |
| GHSA-hwjw-22qj-gpvc Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results | 1% Низкий | больше 3 лет назад | |
| GHSA-hwjv-mc78-cccj Moodle multiple cross-site scripting (XSS) vulnerabilities | 0% Низкий | больше 3 лет назад | |
| GHSA-hpwm-84h5-vqr8 Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| GHSA-hpmv-wvq3-gj27 Moodle cross-site request forgery (CSRF) vulnerability | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| GHSA-hp4v-c3h7-rwmx mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate. | 0% Низкий | больше 3 лет назад | |
| GHSA-hjrj-7wcj-7j3c Moodle sensitive information disclosure | CVSS3: 4.3 | 1% Низкий | больше 3 лет назад |
| GHSA-hjgc-jxjc-8v9j Moodle reflected XSS via H5P error message | CVSS3: 5.4 | 1% Низкий | около 1 года назад |
| GHSA-hj48-8q8c-q7g9 Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter. | 0% Низкий | больше 3 лет назад | |
| GHSA-hhxf-w8hj-43w6 Moodle vulnerable to Cross-site Scripting | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу