An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.

An authentication bypass risk was identified in the external database ...

Insufficient capability checks made it possible for teachers to download users outside of their courses.

Insufficient capability checks made it possible for teachers to download users outside of their courses.

Insufficient capability checks made it possible for teachers to downlo ...

A session hijack risk was identified in the Shibboleth authentication plugin.

A session hijack risk was identified in the Shibboleth authentication plugin.

A session hijack risk was identified in the Shibboleth authentication ...

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified.

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified.

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, ...

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.

In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.

In certain Moodle products after creating a course, it is possible to ...

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.

In Moodle, in some circumstances, email notifications of messages coul ...

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.

In Moodle, Users' names required additional sanitizing in the account ...