moodle vulnerabilities (Bitnami)
237 vulnerabilities.
moodleBitnamiMoodle: moodle assignment submission search leaks anonymous student identities4.3 MediummoodleBitnamiMoodle: partial data exposure in moodle before completing multi-factor authentication4.3 MediummoodleBitnamiMoodle: user dos and name disclosure via idor in moodle mfa email factor revoke action7.1 HighmoodleBitnamiMoodle: moodle allows course self-enrolment before completing mfa4.3 MediummoodleBitnamiSQL injection risk in course search module list filter8.1 HighmoodleBitnamiTeachers can evade trusttext config when restoring glossary entries3.1 LowmoodleBitnamiIDOR in badges allows disabling of arbitrary badges3.1 LowmoodleBitnamiReflected XSS via question bank filter8.3 HighmoodleBitnamiStored XSS risk in admin live log8.3 HighmoodleBitnamiStored XSS in ddimageortext question type3.4 LowmoodleBitnamiNon-searchable tags can still be discovered on the tag search page and in the tags block5.3 MediummoodleBitnamiFeedback response viewing and deletions did not respect Separate Groups mode6.5 MediummoodleBitnamiArbitrary file read risk through pdfTeX8.6 HighmoodleBitnamiMoodle: idor when accessing list of course badges4.3 MediummoodleBitnamiMoodle: lesson activity password bypass through php loose comparison5.4 MediummoodleBitnamiMoodle: idor when deleting oauth2 linked accounts7.5 HighmoodleBitnamiMoodle: unprotected access to sensitive information via dynamic tables6.5 MediummoodleBitnamiMoodle: idor when fetching report schedules4.3 MediummoodleBitnamiMoodle: some users can delete audiences of other reports4.3 MediummoodleBitnamiMoodle: idor in edit/delete rss feed4.3 MediummoodleBitnamiMoodle: users' names returned in messaging error message4.3 MediummoodleBitnamiMoodle: idor when accessing list of badge recipients4.3 MediummoodleBitnamiMoodle: reflected xss via h5p error message5.4 MediummoodleBitnamiMoodle: xss risk when restoring malicious course backup file5.4 MediummoodleBitnamiMoodle: can create global glossary without being admin5.3 MediummoodleBitnamiMoodle: matrix user/power level management not always working as expected with suspended users5.3 MediummoodleBitnamiMoodle: authorization headers preserved between "emulated redirects"5.3 MediummoodleBitnamiMoodle: lack of access control when using external methods for quiz overrides5.3 MediummoodleBitnamiMoodle: user information visibility control issues in gradebook reports5.3 MediummoodleBitnamiMoodle: admin presets export tool includes some secrets that should not be exported3.7 LowmoodleBitnamiMoodle: lfi vulnerability when restoring malformed block backups7.5 HighmoodleBitnamiMoodle: idor in feedback non-respondents report allows messaging arbitrary site users7.5 HighmoodleBitnamiMoodle: site administration sql injection via xmldb editor7.2 HighmoodleBitnamiMoodle: csrf risk in feedback non-respondents report8.1 HighmoodleBitnamiMoodle: idor in badges allows deletion of arbitrary badges7.5 HighmoodleBitnamiMoodle: cache poisoning via injection into storage7.7 HighmoodleBitnamiMoodle: arbitrary file read risk through pdftex7.5 HighmoodleBitnamiMoodle: remote code execution via calculated question types8.1 HighmoodleBitnamiCross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute...5.5 MediummoodleBitnamimoodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys5.4 MediummoodleBitnamimoodle: CSRF risks due to misuse of confirm_sesskey8.8 HighmoodleBitnamimoodle: HTTP authorization header is preserved between "emulated redirects"7.5 HighmoodleBitnamimoodle: stored XSS via calendar's event title when deleting the event6.1 MediummoodleBitnamimoodle: BigBlueButton web service leaks meeting joining information to users who should not have access5.4 MediummoodleBitnamimoodle: ReCAPTCHA can be bypassed on the login page7.5 HighmoodleBitnamimoodle: CSRF risk in analytics management of models8.8 HighmoodleBitnamimoodle: logout CSRF in admin/tool/mfa/auth.php8.8 HighmoodleBitnamimoodle: unsanitized HTML in site log for config_log_created4.3 MediummoodleBitnamimoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup6.5 MediummoodleBitnamimoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup6.5 Medium- Show moreLoading…