Логотип exploitDog
product: "moodle"
Консоль
Логотип exploitDog

exploitDog

product: "moodle"

Количество 2 541

Количество 2 541

nvd логотип

CVE-2024-25980

больше 1 года назад

Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2024-25980

больше 1 года назад

Separate Groups mode restrictions were not honored in the H5P attempts ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2024-25979

больше 1 года назад

The URL parameters accepted by forum search were not limited to the allowed parameters.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2024-25979

больше 1 года назад

The URL parameters accepted by forum search were not limited to the allowed parameters.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2024-25979

больше 1 года назад

The URL parameters accepted by forum search were not limited to the al ...

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2024-25978

больше 1 года назад

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-25978

больше 1 года назад

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-25978

больше 1 года назад

Insufficient file size checks resulted in a denial of service risk in ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2024-1439

больше 1 года назад

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-1439

больше 1 года назад

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2024-1439

больше 1 года назад

Inadequate access control in Moodle LMS. This vulnerability could allo ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2023-5547

почти 2 года назад

The course upload preview contained an XSS risk for users uploading unsafe data.

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2023-5547

почти 2 года назад

The course upload preview contained an XSS risk for users uploading unsafe data.

CVSS3: 3.3
EPSS: Низкий
debian логотип

CVE-2023-5547

почти 2 года назад

The course upload preview contained an XSS risk for users uploading un ...

CVSS3: 3.3
EPSS: Низкий
ubuntu логотип

CVE-2023-5546

почти 2 года назад

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-5546

почти 2 года назад

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-5546

почти 2 года назад

ID numbers displayed in the quiz grading report required additional sa ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2023-5544

почти 2 года назад

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-5544

почти 2 года назад

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-5544

почти 2 года назад

Wiki comments required additional sanitizing and access restrictions t ...

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-25980

Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.

CVSS3: 4.3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-25980

Separate Groups mode restrictions were not honored in the H5P attempts ...

CVSS3: 4.3
0%
Низкий
больше 1 года назад
ubuntu логотип
CVE-2024-25979

The URL parameters accepted by forum search were not limited to the allowed parameters.

CVSS3: 5.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-25979

The URL parameters accepted by forum search were not limited to the allowed parameters.

CVSS3: 5.3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-25979

The URL parameters accepted by forum search were not limited to the al ...

CVSS3: 5.3
0%
Низкий
больше 1 года назад
ubuntu логотип
CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-25978

Insufficient file size checks resulted in a denial of service risk in ...

CVSS3: 7.5
0%
Низкий
больше 1 года назад
ubuntu логотип
CVE-2024-1439

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

CVSS3: 6.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-1439

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

CVSS3: 6.5
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-1439

Inadequate access control in Moodle LMS. This vulnerability could allo ...

CVSS3: 6.5
0%
Низкий
больше 1 года назад
ubuntu логотип
CVE-2023-5547

The course upload preview contained an XSS risk for users uploading unsafe data.

CVSS3: 3.3
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-5547

The course upload preview contained an XSS risk for users uploading unsafe data.

CVSS3: 3.3
0%
Низкий
почти 2 года назад
debian логотип
CVE-2023-5547

The course upload preview contained an XSS risk for users uploading un ...

CVSS3: 3.3
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2023-5546

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

CVSS3: 4.3
1%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-5546

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

CVSS3: 4.3
1%
Низкий
почти 2 года назад
debian логотип
CVE-2023-5546

ID numbers displayed in the quiz grading report required additional sa ...

CVSS3: 4.3
1%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2023-5544

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-5544

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

CVSS3: 6.5
0%
Низкий
почти 2 года назад
debian логотип
CVE-2023-5544

Wiki comments required additional sanitizing and access restrictions t ...

CVSS3: 6.5
0%
Низкий
почти 2 года назад

Уязвимостей на страницу