moodle vulnerabilities (Bitnami)
237 vulnerabilities.
moodleBitnamimoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup5.9 MediummoodleBitnamimoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup6.5 MediummoodleBitnamimoodle: CSRF risk in admin preset tool management of presets8.4 HighmoodleBitnamimoodle: stored XSS in lesson overview report via user ID number4.3 MediummoodleBitnamimoodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php9.8 CriticalmoodleBitnamimoodle: stored XSS via user's name on participants page when opening some options5.4 MediummoodleBitnamimoodle: stored XSS risk when editing another user's equation in equation editor6.1 MediummoodleBitnamimoodle: broken access control when setting calendar event type6.2 MediummoodleBitnamiCross-site Scripting in Moodle Chat5.4 MediummoodleBitnamiCross site scripting in moodle6.1 MediummoodleBitnamiMsa-24-0006: idor on dashboard comments block3.5 LowmoodleBitnamiMsa-24-0005: csrf risk in language import utility4.3 MediummoodleBitnamiMsa-24-0004: forum export did not respect activity group settings4.3 MediummoodleBitnamiMsa-24-0003: h5p attempts report did not respect activity group settings4.3 MediummoodleBitnamiMsa-24-0002: forum search accepted random parameters in its url5.3 MediummoodleBitnamiMsa-24-0001: denial of service risk in file picker unzip functionality7.5 HighmoodleBitnamiInadequate access control vulnerability in Moodle6.5 MediummoodleBitnamiMoodle: duplicating a bigbluebutton activity assigns the same meeting id3.3 LowmoodleBitnamiMoodle: forum summary report shows students from other groups when in separate groups mode3.3 LowmoodleBitnamiMoodle: rce due to lfi risk in some misconfigured shared hosting environments6.5 MediummoodleBitnamiMoodle: insufficient capability checks when updating the parent of a course category3.3 LowmoodleBitnamiMoodle: cache poisoning risk with endpoint revision numbers3.3 LowmoodleBitnamiMoodle: xss risk when previewing data in course upload tool3.3 LowmoodleBitnamiMoodle: stored xss in quiz grading report via user id number4.3 MediummoodleBitnamiMoodle: auto-populated h5p author name causes a potential information leak3.3 LowmoodleBitnamiMoodle: stored xss and potential idor risk in wiki comments6.5 MediummoodleBitnamiMoodle: students can view other users in "only see own membership" groups3.3 LowmoodleBitnamiMoodle: xss risk when using csv grade import method3.3 LowmoodleBitnamiMoodle: authenticated remote code execution risk in imscp4.7 MediummoodleBitnamiMoodle: authenticated remote code execution risk in lesson4.7 MediummoodleBitnami** DISPUTED ** Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when...5.4 MediummoodleBitnamiMoodle: ssrf risk due to insufficient check on the curl blocked hosts7.5 HighmoodleBitnamiMoodle: minor sql injection risk on mnet sso access control page6.3 MediummoodleBitnamiMoodle: xss risk on groups page6.1 MediummoodleBitnamiMoodle vulnerable to stored Cross-site Scripting5.4 MediummoodleBitnamiMoodle: minor sql injection risk in external wiki method for listing pages5.6 MediummoodleBitnamiMoodle: tinymce loaders susceptible to arbitrary folder creation6.5 MediummoodleBitnamiMoodle may allow students to bypass sequential navigation during a quiz attempt4.3 MediummoodleBitnamiMoodle: teacher can access names of users they do not have permission to access4.3 MediummoodleBitnamiMoodle: csrf risk in resetting all templates of a database activity8.8 HighmoodleBitnamiMoodle: users' name enumeration possible via idor on learning plans page4.3 MediummoodleBitnamiMoodle: pix helper potential mustache code injection risk9.8 CriticalmoodleBitnamiMoodle: algebra filter xss when filter is misconfigured6.1 MediummoodleBitnamiMoodle: xss risk when outputting database activity filter data6.1 MediummoodleBitnamiMoodle: authenticated arbitrary file read through malformed backup file6.5 MediummoodleBitnamiMoodle: authenticated sql injection via availability check8.8 HighmoodleBitnamiMoodle: course participation report shows roles the user should not see4.3 MediummoodleBitnamiMoodle has a Hidden Functionality vulnerability5.3 MediummoodleBitnamiMoodle Improper Input Validation vulnerability5.3 MediummoodleBitnamiMoodle vulnerable to Stored Cross-site Scripting4.8 Medium- Show moreLoading…