Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-2vhr-4mhq-m35c
Moodle does not properly restrict access
GHSA-2r9m-wg35-rfvc
Moodle vulnerable to cache poisoning via injection into storage
GHSA-2phx-w35g-x9vm
Moodle Weak Password Recovery Mechanism for Forgotten Password
GHSA-2mg9-hv69-897x
Moodle Ability to delete glossary entries that belong to another glossary
GHSA-2mf2-xc34-hpjc
course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability instead of a reset capability, which allows remote authenticated users to bypass intended access restrictions via a reset operation.
GHSA-2m72-m5cw-3g9h
Missing permission check in Moodle
GHSA-2jxg-mv2m-j4r7
Moodle type juggling vulnerability
GHSA-2jrm-gww7-wch2
Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration
GHSA-2jcw-r79x-4r5v
Moodle does not set the RISK_XSS bit for graders
GHSA-2hw8-qj3h-c7pq
badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote attackers to conduct PHP object injection attacks via unspecified vectors, as demonstrated by overwriting the value of the userid parameter.
GHSA-2hw6-6rgf-726v
Moodle XSS Vulnerability
GHSA-2hw2-h3mf-c2j9
Moodle open redirect vulnerability
GHSA-2hmm-q272-xmhf
Moodle remote code execution
GHSA-2hh3-jmv8-5fmx
Moodle Does Not Escape Characters In Email Headers
GHSA-2fmv-j5xj-4fmq
Moodle Reveals Student Information Meant To Be Anonymous
GHSA-2c5m-jj29-px47
Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.
GHSA-29qm-g73m-2r7h
A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted destinations, leading to Server-Side Request Forgery (SSRF).
GHSA-28gc-4qq5-8q26
Moodle Cross-site Scripting vulnerability
GHSA-2887-hwqc-wcg8
Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.
GHSA-27j2-c838-c3qg
Moodle Arbitrary File Read via XML External Entity vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-2vhr-4mhq-m35c Moodle does not properly restrict access | 1% Низкий | больше 4 лет назад | |
| GHSA-2r9m-wg35-rfvc Moodle vulnerable to cache poisoning via injection into storage | CVSS3: 7.7 | 0% Низкий | около 2 лет назад |
| GHSA-2phx-w35g-x9vm Moodle Weak Password Recovery Mechanism for Forgotten Password | CVSS3: 7.3 | 1% Низкий | больше 4 лет назад |
| GHSA-2mg9-hv69-897x Moodle Ability to delete glossary entries that belong to another glossary | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-2mf2-xc34-hpjc course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability instead of a reset capability, which allows remote authenticated users to bypass intended access restrictions via a reset operation. | 1% Низкий | больше 4 лет назад | |
| GHSA-2m72-m5cw-3g9h Missing permission check in Moodle | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-2jxg-mv2m-j4r7 Moodle type juggling vulnerability | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| GHSA-2jrm-gww7-wch2 Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration | CVSS3: 7.2 | 2% Низкий | больше 4 лет назад |
| GHSA-2jcw-r79x-4r5v Moodle does not set the RISK_XSS bit for graders | 1% Низкий | больше 4 лет назад | |
| GHSA-2hw8-qj3h-c7pq badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote attackers to conduct PHP object injection attacks via unspecified vectors, as demonstrated by overwriting the value of the userid parameter. | 2% Низкий | больше 4 лет назад | |
| GHSA-2hw6-6rgf-726v Moodle XSS Vulnerability | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
| GHSA-2hw2-h3mf-c2j9 Moodle open redirect vulnerability | CVSS3: 7.4 | 2% Низкий | больше 4 лет назад |
| GHSA-2hmm-q272-xmhf Moodle remote code execution | CVSS3: 9.8 | 2% Низкий | около 4 лет назад |
| GHSA-2hh3-jmv8-5fmx Moodle Does Not Escape Characters In Email Headers | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| GHSA-2fmv-j5xj-4fmq Moodle Reveals Student Information Meant To Be Anonymous | 2% Низкий | больше 4 лет назад | |
| GHSA-2c5m-jj29-px47 Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter. | 2% Низкий | больше 4 лет назад | |
| GHSA-29qm-g73m-2r7h A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce the server to make requests to restricted destinations, leading to Server-Side Request Forgery (SSRF). | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
| GHSA-28gc-4qq5-8q26 Moodle Cross-site Scripting vulnerability | CVSS3: 6.1 | 1% Низкий | около 3 лет назад |
| GHSA-2887-hwqc-wcg8 Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records. | 1% Низкий | больше 4 лет назад | |
| GHSA-27j2-c838-c3qg Moodle Arbitrary File Read via XML External Entity vulnerability | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу