Open Source Vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle CRLF Injection Vulnerability in Calendar Component

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Users Can Bypass Deleted Status

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Allows Unauthenticated Dropbox Access

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module

moodle/moodle, moodle/moodle, moodle/moodle

Moodle's login_as feature leaks information from external repositories

moodle/moodle, moodle/moodle, moodle/moodle

Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class

moodle/moodle

Moodle Authentication Bypass in File Upload

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not enforce capability requirements for reading blog comments

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not consider "don't send" attributes during hub registration

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly manage privileges for WebDAV repositories

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows remote authenticated users to reassign notes

moodle/moodle, moodle/moodle

Moodle is vulnerable to Sensitive Information Disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not enforce the forceloginforprofiles setting

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle includes the WebDAV password in the configuration form

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle reveals absolute path in exception message

yui, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

YUI Cross-site Scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Arbitrary File Read via Backup Functionality

yui, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

YUI Cross-site Scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

yui, yui, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

YUI Cross-site Scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle

Moodle attackers to modify grade metadata

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Reveals Student Information Meant To Be Anonymous

moodle/moodle, moodle/moodle, moodle/moodle

Moodle creates a MoodleMobile web-service token with an infinite lifetime

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle

Moodle allows attackers to modify the visibility of a badge

moodle/moodle, moodle/moodle, moodle/moodle

Moodle's time-validation implementation allows bypassing intended restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly restrict file access

moodle/moodle

Moodle does not check for the moodle/course:viewhiddencourses capability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly restrict access

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass intended access restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows bypass of intended access restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle places a session key in a URL

moodle/moodle

Moodle does not set the RISK_XSS bit for graders

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to read SCORM contents

moodle/moodle, moodle/moodle, moodle/moodle, typo3/cms, typo3/cms

Moodle cross-site scripting (XSS) vulnerabilities

moodle/moodle

Moodle improper access control

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle

Moodle Information Disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle uses predictable password-recovery tokens

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to delete files

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain manager privileges

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities