Moodle: stored xss in quiz grading report via user id number
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de moodle · Page n° 7
Vulnérabilités publiées pour moodle au cours des 30 derniers jours : 12. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 323
Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
Publication Mise à jourMoodle: stored xss and potential idor risk in wiki comments
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
Publication Mise à jourMoodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
Publication Mise à jourMoodle: xss risk when using csv grade import method
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
Publication Mise à jourMoodle: authenticated remote code execution risk in imscp
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.
Publication Mise à jourMoodle: authenticated remote code execution risk in lesson
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.
Publication Mise à jourUBUNTU-CVE-2023-40325
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40324
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40323
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40322
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40321
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40320
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40319
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40318
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40317
[Unknown description]
Publication Mise à jourUBUNTU-CVE-2023-40316
[Unknown description]
Publication Mise à jourMoodle: ssrf risk due to insufficient check on the curl blocked hosts
An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Publication Mise à jourMoodle: minor sql injection risk on mnet sso access control page
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Publication Mise à jourMoodle: xss risk on groups page
Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.