moodle vulnerabilities (Ubuntu)
333 vulnerabilities.
moodleUbuntumoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup6.5 MediummoodleUbuntumoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup5.9 MediummoodleUbuntumoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup6.5 MediummoodleUbuntumoodle: CSRF risk in admin preset tool management of presets8.4 HighmoodleUbuntumoodle: stored XSS in lesson overview report via user ID number4.3 MediummoodleUbuntumoodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php9.8 CriticalmoodleUbuntumoodle: stored XSS via user's name on participants page when opening some options5.4 MediummoodleUbuntumoodle: stored XSS risk when editing another user's equation in equation editor6.1 MediummoodleUbuntumoodle: broken access control when setting calendar event type6.2 MediummoodleUbuntuCross-site Scripting in Moodle Chat5.4 MediummoodleUbuntuCross site scripting in moodle6.1 MediummoodleUbuntuMsa-24-0006: idor on dashboard comments block3.5 LowmoodleUbuntuMsa-24-0005: csrf risk in language import utility4.3 MediummoodleUbuntuMsa-24-0004: forum export did not respect activity group settings4.3 MediummoodleUbuntuMsa-24-0003: h5p attempts report did not respect activity group settings4.3 MediummoodleUbuntuMsa-24-0002: forum search accepted random parameters in its url5.3 MediummoodleUbuntuMsa-24-0001: denial of service risk in file picker unzip functionality7.5 HighmoodleUbuntuInadequate access control vulnerability in Moodle6.5 MediummoodleUbuntuMoodle: duplicating a bigbluebutton activity assigns the same meeting id3.3 LowmoodleUbuntuMoodle: forum summary report shows students from other groups when in separate groups mode3.3 LowmoodleUbuntuMoodle: rce due to lfi risk in some misconfigured shared hosting environments6.5 MediummoodleUbuntuMoodle: insufficient capability checks when updating the parent of a course category3.3 LowmoodleUbuntuMoodle: cache poisoning risk with endpoint revision numbers3.3 LowmoodleUbuntuMoodle: xss risk when previewing data in course upload tool3.3 LowmoodleUbuntuMoodle: stored xss in quiz grading report via user id number4.3 MediummoodleUbuntuMoodle: auto-populated h5p author name causes a potential information leak3.3 LowmoodleUbuntuMoodle: stored xss and potential idor risk in wiki comments6.5 MediummoodleUbuntuMoodle: students can view other users in "only see own membership" groups3.3 LowmoodleUbuntuMoodle: xss risk when using csv grade import method3.3 LowmoodleUbuntuMoodle: authenticated remote code execution risk in imscp4.7 MediummoodleUbuntuMoodle: authenticated remote code execution risk in lesson4.7 MediummoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntuMoodle: ssrf risk due to insufficient check on the curl blocked hosts7.5 HighmoodleUbuntuMoodle: minor sql injection risk on mnet sso access control page6.3 MediummoodleUbuntuMoodle: xss risk on groups page6.1 MediummoodleUbuntuMoodle: minor sql injection risk in external wiki method for listing pages5.6 MediummoodleUbuntuMoodle: tinymce loaders susceptible to arbitrary folder creation6.5 MediummoodleUbuntuMoodle may allow students to bypass sequential navigation during a quiz attempt4.3 MediummoodleUbuntuMoodle: teacher can access names of users they do not have permission to access4.3 MediummoodleUbuntuMoodle: csrf risk in resetting all templates of a database activity8.8 HighmoodleUbuntuMoodle: users' name enumeration possible via idor on learning plans page4.3 Medium- Show moreLoading…