Open Source Vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Does Not Escape Characters In Email Headers

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Weak Password Recovery Mechanism for Forgotten Password

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle remote code execution via quiz questions

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain username and course information

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Incorrect sanitation of attributes in forums

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle vulnerable to PHP object injection attacks

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Unauthenticated Access

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows remote attackers to read arbitrary files

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to modify "Exclude grade" settings

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS from profile fields from external db

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle External function mod_assign_save_submission does not check due dates

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to discover hidden course names

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Improper Access Control

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Cross-site scripting (XSS) vulnerability in course management search

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Improper Access Control

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle provides calendar-event data without considering whether an activity is hidden

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive category-detail information

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Reflected XSS in mod_data advanced search

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to discover student e-mail addresses

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Incorrect Authorization in Jenkins

org.keycloak:keycloak-parent

Keycloak Improper Bruteforce Detection

org.jboss.eap:wildfly-undertow

Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow

github.com/openshift/oauth-apiserver

Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability

io.undertow:undertow-core

Exposure of Sensitive Information to an Unauthorized Actor in Undertow

statamic/cms

Statamic framework Incorrect Permission Assignment

com.ning:async-http-client

Insufficient Verification of Data Authenticity in Async Http Client

com.ning:async-http-client

Insufficient Verification of Data Authenticity in Async Http Client

bolt/bolt

Bolt Unrestricted Upload of File with Dangerous Type

bolt/bolt

Bolt Cross Site Request Forgery (CSRF)

bolt/bolt

Bolt Improper Access Control

org.apache.tomcat:tomcat

Apache Tomcat Unrestricted file upload vulnerability

inter-mediator/inter-mediator

INTER-Mediator Cross-Site Scripting (XSS)

pagekit/pagekit

Pagekit Weak Password Recovery Mechanism for Forgotten Password

oxid-esales/oxideshop-ce

OXID eShop user impersonation vulnerability

oauthenticator, oauthenticator

JupyterHub OAuthenticator elevation of privilege

org.springframework.ldap:spring-ldap-core

Improper Authentication in Pivotal Spring-LDAP

mautic/core

Mautic Cross-Site Request Forgery (CSRF)

org.codehaus.plexus:plexus-utils

OS Command Injection in Plexus-utils

org.hornetq:hornetq-server, org.apache.activemq:artemis-native

Uncontrolled Resource Consumption in Artemis and HornetQ

org.apache.activemq:artemis-pom

Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain

dolibarr/dolibarr

Dolibarr SQL Injection vulnerability

com.squareup.okhttp3:okhttp, com.squareup.okhttp3:okhttp

Improper Certificate Validation in OkHttp