Advisories for packages from moodle

Listing reported advisories for packages from moodle sorted by their report date.

Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:52:25
Moodle directory traversal vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.3 · >= 2.7.0, < 2.7.5 · < 2.6.8

2024-01-25 20:51:30
Moodle allows attackers to cause a denial of service
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:44:41
Moodle does not set the RISK_XSS bit for graders
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2

2024-01-25 20:43:53
Moodle allows attackers to obtain sensitive calendar-event information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:43:36
Moodle allows attackers to bypass a messaging-disabled setting
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:34:41
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:34:15
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:33:55
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:33:32
Moodle allows attackers to trigger the generation of arbitrary messages
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-25 20:29:28
Moodle does not provide charset information in HTTP headers
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-25 20:28:15
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
GitHub

moodle/moodle

>= 2.1.0, < 2.1.10 · >= 2.3.0, < 2.3.4 · >= 2.2.0, < 2.2.7 · = 2.4.0

2024-01-25 20:27:59
Moodle allows attacks to obtain sensitive information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:42:56
Moodle allows attackers to cause a denial of service
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:42:35
Moodle does not consider the moodle/tag:edit capability before adding a tag
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:42:14
Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:41:51
Moodle allows attackers to remove wiki pages
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:38:36
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:30:58
Moodle allows attackers to upload files containing JavaScript
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:30:19
Moodle does not verify group permissions
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:29:46
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:29:16
Moodle allows attackers to bypass the mod/lti:view capability requirement
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:28:34
Moodle exposes hidden grades to students
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3

2024-01-24 21:27:59
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:27:10
Moodle does not enforce the moodle/site:accessallgroups capability requirement
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · < 2.5.7

2024-01-24 21:24:26
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:23:38
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:21:48
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7

2024-01-24 21:20:53
Moodle allows attackers to obtain username and course information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:20:17
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:17:35
Moodle vulnerable to PHP object injection attacks
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:17:07
Moodle attackers to modify grade metadata
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2

2024-01-24 21:16:30
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 21:14:12
Moodle Arbitrary File Read via XML External Entity vulnerability
GitHub

moodle/moodle

>= 2.4.0, <= 2.4.10 · >= 2.6.0, <= 2.6.3 · >= 2.5.0, <= 2.5.6 · <= 2.4.10 · = 2.7.0

2024-01-24 18:35:54
Moodle does not check for the moodle/course:viewhiddencourses capability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3

2024-01-24 16:22:37
Moodle does not properly restrict file access
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:21:07
Moodle creates a MoodleMobile web-service token with an infinite lifetime
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:37
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:14
Moodle allows attackers to modify the visibility of a badge
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5

2024-01-24 16:19:46
Moodle's time-validation implementation allows bypassing intended restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:21
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:06
Moodle places a session key in a URL
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:51
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:31
Moodle does not properly restrict access
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-23 17:51:56
Moodle allows bypass of intended access restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-23 17:51:44
Moodle does not enforce capability requirements for reading blog comments
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · < 2.2.10

2024-01-23 17:51:13
Moodle does not consider "don't send" attributes during hub registration
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · < 2.2.10

2024-01-23 17:50:53
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
GitHub

moodle/moodle

>= 2.2.0, < 2.2.10 · >= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · <= 2.1.10 · < 2.2.10

2024-01-23 16:09:04
Moodle is vulnerable to Sensitive Information Disclosure
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · <= 2.2.10 · < 2.3.7

2024-01-23 15:23:21
Moodle's login_as feature leaks information from external repositories
GitHub

moodle/moodle

>= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.0.0, < 2.2.8

2024-01-23 14:37:25
« Previous Next »

Showing 251 to 300 of 436 results

1 2 3 4 5 6 7 8 9