Open Source Vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly implement group-based access restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle mishandles group-based authorization checks

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to enter additional answer attempts

moodle/moodle, moodle/moodle, moodle/moodle

Moodle open redirect vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass file-management restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive course-structure information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Arbitrary Redirect

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to cause a denial of service

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass intended login restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass a forced-password-change requirement

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not set the RISK_XSS bit for graders

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to extract archives to arbitrary directories

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive course information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers obtain full-name information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle directory traversal vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not consider the moodle/tag:flag capability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass a messaging-disabled setting

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not consider the moodle/tag:edit capability before adding a tag

moodle/moodle, moodle/moodle

Moodle allows attacks to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to cause a denial of service

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Temporary Passwords are Brute Force-able

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to trigger the generation of arbitrary messages

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not provide charset information in HTTP headers

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive calendar-event information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to remove wiki pages

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to cause a denial of service

moodle/moodle, moodle/moodle

Moodle allows attackers to upload files containing JavaScript

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows discovery of an author's username

moodle/moodle

Moodle exposes hidden grades to students

moodle/moodle, moodle/moodle

Moodle does not verify group permissions

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not enforce the moodle/site:accessallgroups capability requirement

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass the mod/lti:view capability requirement

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Arbitrary File Read via XML External Entity vulnerability