moodle vulnerabilities (Ubuntu)
332 vulnerabilities.
-
moodleUbuntu Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems 5.3 Medium -
moodleUbuntu Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback 5.3 Medium -
moodleUbuntu Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber 6.0 Medium -
moodleUbuntu Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal 7.1 High -
moodleUbuntu Moodle: csrf in xml grade import 6.5 Medium -
moodleUbuntu Moodle: user list filters bypass profile field visibility 2.7 Low -
moodleUbuntu Moodle: xss via password reset link due to insufficient username escaping 4.3 Medium -
moodleUbuntu Moodle: group validation missing when enrolling user to course 4.3 Medium -
moodleUbuntu Moodle: missing capability check allows unauthorised grade penalty recalculation 4.3 Medium -
moodleUbuntu Moodle: incorrect capability check in ai generate image web service 2.7 Low -
moodleUbuntu Moodle: manual enrolment page accessible when plugin disabled 2.2 Low -
moodleUbuntu Moodle: xss in forum post templates due to insufficient escaping 4.6 Medium -
moodleUbuntu Moodle: arbitrary class instantiation via report builder audience classname 2.2 Low -
moodleUbuntu Moodle: user profile information disclosure via grade web service 4.3 Medium -
moodleUbuntu Moodle: sql injection in question bank web service 5.5 Medium -
moodleUbuntu Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass 4.3 Medium -
moodleUbuntu Moodle LMS 4.0 Cross-Site Scripting via course search.php 5.1 Medium -
moodleUbuntu Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service 6.5 Medium -
moodleUbuntu Moodle: moodle: improper input sanitization in tex filter administration setting 7.2 High -
moodleUbuntu Moodle: moodle: improper validation in file restore functionality leading to remote code execution 7.2 High -
moodleUbuntu Moodle: moodle: data exposure of user identifiers in urls 4.3 Medium -
moodleUbuntu Moodle: moodle: privilege escalation via incomplete role checks in badge awarding 5.4 Medium -
moodleUbuntu Mooodle: mooodle: information disclosure and script execution via reflected cross-site scripting 5.4 Medium -
moodleUbuntu Moodle: moodle: brute-force facilitation due to missing rate limiting in confirmation email service 7.5 High -
moodleUbuntu Moodle: moodle: open redirect vulnerability in oauth login flow allows redirection to malicious sites. 3.5 Low -
moodleUbuntu Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export 6.1 Medium -
moodleUbuntu Moodle: moodle: cross-site scripting vulnerability via inadequate input filtering in formula editor 7.3 High -
moodleUbuntu Moodle: moodle: cross-site scripting (xss) via improper sanitization of ai prompt responses 7.3 High -
moodleUbuntu Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access. 8.1 High -
moodleUbuntu Moodle: moodle: remote code execution via insufficient restore input validation 8.8 High -
moodleUbuntu Moodle: possible to bypass timer in timed assignments 5.4 Medium -
moodleUbuntu Moodle: external cohort search service leaks system cohort data 4.3 Medium -
moodleUbuntu Moodle: hidden group names visible to event creators 4.3 Medium -
moodleUbuntu Moodle: password brute force risk when mobile/web services enabled 7.5 High -
moodleUbuntu Moodle: possible to bypass mfa 5.4 Medium -
moodleUbuntu Moodle: router produces json instead of 404 error for invalid course id 5.3 Medium -
moodleUbuntu Moodle: router (r.php) could expose application directories 5.3 Medium -
moodleUbuntu Moodle: quiz notifications sent to suspended participants 4.3 Medium -
moodleUbuntu Moodle: course access permissions not properly checked in course_output_fragment_course_overview 4.3 Medium -
moodleUbuntu Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter 4.2 Medium -
moodleUbuntu Moodle: hidden grades shown to users without permission on some grade reports 5.3 Medium -
moodleUbuntu Moodle: unauthenticated rest api user data exposure 7.5 High -
moodleUbuntu Moodle: idor when accessing the cohorts report 4.3 Medium -
moodleUbuntu Moodle: idor in messaging web service allows access to some user details 4.3 Medium -
moodleUbuntu Moodle: ajax section delete does not respect course_can_delete_section() 4.3 Medium -
moodleUbuntu Moodle: reflected xss risk in policy tool 5.4 Medium -
moodleUbuntu Moodle: authenticated remote code execution risk in the moodle lms equella repository 8.8 High -
moodleUbuntu Moodle: authenticated remote code execution risk in the moodle lms dropbox repository 8.8 High -
moodleUbuntu Moodle: idor in web service allows users enrolled in a course to access some details of other users 4.3 Medium -
moodleUbuntu Moodle: csrf risk in brickfield tool's analysis request action 8.8 High - Show olderLoading…