moodle vulnerabilities (Bitnami)
237 vulnerabilities.
-
moodleBitnami Moodle: csrf in xml grade import 6.5 Medium -
moodleBitnami Moodle: user list filters bypass profile field visibility 2.7 Low -
moodleBitnami Moodle: xss via password reset link due to insufficient username escaping 4.3 Medium -
moodleBitnami Moodle: group validation missing when enrolling user to course 4.3 Medium -
moodleBitnami Moodle: missing capability check allows unauthorised grade penalty recalculation 4.3 Medium -
moodleBitnami Moodle: incorrect capability check in ai generate image web service 2.7 Low -
moodleBitnami Moodle: manual enrolment page accessible when plugin disabled 2.2 Low -
moodleBitnami Moodle: xss in forum post templates due to insufficient escaping 4.6 Medium -
moodleBitnami Moodle: arbitrary class instantiation via report builder audience classname 2.2 Low -
moodleBitnami Moodle: user profile information disclosure via grade web service 4.3 Medium -
moodleBitnami Moodle: sql injection in question bank web service 5.5 Medium -
moodleBitnami Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass 4.3 Medium -
moodleBitnami Moodle LMS 4.0 Cross-Site Scripting via course search.php 5.1 Medium -
moodleBitnami Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service 6.5 Medium -
moodleBitnami Moodle: moodle: improper input sanitization in tex filter administration setting 7.2 High -
moodleBitnami Moodle: moodle: improper validation in file restore functionality leading to remote code execution 7.2 High -
moodleBitnami Moodle: moodle: data exposure of user identifiers in urls 4.3 Medium -
moodleBitnami Moodle: moodle: privilege escalation via incomplete role checks in badge awarding 5.4 Medium -
moodleBitnami Mooodle: mooodle: information disclosure and script execution via reflected cross-site scripting 5.4 Medium -
moodleBitnami Moodle: moodle: brute-force facilitation due to missing rate limiting in confirmation email service 7.5 High -
moodleBitnami Moodle: moodle: open redirect vulnerability in oauth login flow allows redirection to malicious sites. 3.5 Low -
moodleBitnami Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export 6.1 Medium -
moodleBitnami Moodle: moodle: cross-site scripting vulnerability via inadequate input filtering in formula editor 7.3 High -
moodleBitnami Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses 7.3 High -
moodleBitnami Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access. 8.1 High -
moodleBitnami Moodle: moodle: remote code execution via insufficient restore input validation 8.8 High -
moodleBitnami Moodle 3.10.3 - 'label' Persistent Cross Site Scripting 5.1 Medium -
moodleBitnami Moodle: possible to bypass timer in timed assignments 5.4 Medium -
moodleBitnami Moodle: external cohort search service leaks system cohort data 4.3 Medium -
moodleBitnami Moodle: hidden group names visible to event creators 4.3 Medium -
moodleBitnami Moodle: password brute force risk when mobile/web services enabled 7.5 High -
moodleBitnami Moodle: possible to bypass mfa 5.4 Medium -
moodleBitnami Moodle: router produces json instead of 404 error for invalid course id 5.3 Medium -
moodleBitnami Moodle: router (r.php) could expose application directories 5.3 Medium -
moodleBitnami Moodle: quiz notifications sent to suspended participants 4.3 Medium -
moodleBitnami Moodle: course access permissions not properly checked in course_output_fragment_course_overview 4.3 Medium -
moodleBitnami Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter 4.2 Medium -
moodleBitnami Moodle: hidden grades shown to users without permission on some grade reports 5.3 Medium -
moodleBitnami Moodle: unauthenticated rest api user data exposure 7.5 High -
moodleBitnami Moodle: idor when accessing the cohorts report 4.3 Medium -
moodleBitnami Moodle: idor in messaging web service allows access to some user details 4.3 Medium -
moodleBitnami Moodle: ajax section delete does not respect course_can_delete_section() 4.3 Medium -
moodleBitnami Moodle: reflected xss risk in policy tool 5.4 Medium -
moodleBitnami Moodle: authenticated remote code execution risk in the moodle lms equella repository 8.8 High -
moodleBitnami Moodle: authenticated remote code execution risk in the moodle lms dropbox repository 8.8 High -
moodleBitnami Moodle: idor in web service allows users enrolled in a course to access some details of other users 4.3 Medium -
moodleBitnami Moodle: csrf risk in brickfield tool's analysis request action 8.8 High -
moodleBitnami Moodle: csrf token exposure via url in moodle mod_data module 3.1 Low -
moodleBitnami Moodle: idor in moodle rss block allows unauthorized access to rss feeds 4.3 Medium -
moodleBitnami Moodle: csrf risk in moodle user tours manager allows tour duplication 3.5 Low - Show olderLoading…