Open Source Vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

yui, yui, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

YUI Cross-site Scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle

Moodle attackers to modify grade metadata

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Reveals Student Information Meant To Be Anonymous

moodle/moodle, moodle/moodle, moodle/moodle

Moodle creates a MoodleMobile web-service token with an infinite lifetime

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle

Moodle allows attackers to modify the visibility of a badge

moodle/moodle, moodle/moodle, moodle/moodle

Moodle's time-validation implementation allows bypassing intended restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly restrict file access

moodle/moodle

Moodle does not check for the moodle/course:viewhiddencourses capability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly restrict access

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass intended access restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows bypass of intended access restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle places a session key in a URL

moodle/moodle

Moodle does not set the RISK_XSS bit for graders

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to read SCORM contents

moodle/moodle, moodle/moodle, moodle/moodle, typo3/cms, typo3/cms

Moodle cross-site scripting (XSS) vulnerabilities

moodle/moodle

Moodle improper access control

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle

Moodle Information Disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle uses predictable password-recovery tokens

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to delete files

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain manager privileges

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not properly implement group-based access restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle mishandles group-based authorization checks

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to enter additional answer attempts

moodle/moodle, moodle/moodle, moodle/moodle

Moodle open redirect vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass file-management restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive course-structure information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Arbitrary Redirect

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to cause a denial of service

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass intended login restrictions

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass a forced-password-change requirement

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not set the RISK_XSS bit for graders

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to extract archives to arbitrary directories

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive course information