Moodle: stored xss in quiz grading report via user id number
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de moodle · Página 7
Vulnerabilidades publicadas para moodle en los últimos 30 días: 12. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 323
Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
Publicación ActualizaciónMoodle: stored xss and potential idor risk in wiki comments
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
Publicación ActualizaciónMoodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
Publicación ActualizaciónMoodle: xss risk when using csv grade import method
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
Publicación ActualizaciónMoodle: authenticated remote code execution risk in imscp
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.
Publicación ActualizaciónMoodle: authenticated remote code execution risk in lesson
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.
Publicación ActualizaciónUBUNTU-CVE-2023-40325
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40324
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40323
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40322
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40321
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40320
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40319
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40318
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40317
[Unknown description]
Publicación ActualizaciónUBUNTU-CVE-2023-40316
[Unknown description]
Publicación ActualizaciónMoodle: ssrf risk due to insufficient check on the curl blocked hosts
An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Publicación ActualizaciónMoodle: minor sql injection risk on mnet sso access control page
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Publicación ActualizaciónMoodle: xss risk on groups page
Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.