moodle vulnerabilities (Ubuntu)
333 vulnerabilities.
moodleUbuntuMoodle: csrf token exposure via url in moodle mod_data module3.1 LowmoodleUbuntuMoodle: idor in moodle rss block allows unauthorized access to rss feeds4.3 MediummoodleUbuntuMoodle: csrf risk in moodle user tours manager allows tour duplication3.5 LowmoodleUbuntuMoodle: moodle assignment submission search leaks anonymous student identities4.3 MediummoodleUbuntuMoodle: partial data exposure in moodle before completing multi-factor authentication4.3 MediummoodleUbuntuMoodle: user dos and name disclosure via idor in moodle mfa email factor revoke action7.1 HighmoodleUbuntuMoodle: moodle allows course self-enrolment before completing mfa4.3 MediummoodleUbuntuSQL injection risk in course search module list filter8.1 HighmoodleUbuntuTeachers can evade trusttext config when restoring glossary entries3.1 LowmoodleUbuntuIDOR in badges allows disabling of arbitrary badges3.1 LowmoodleUbuntuReflected XSS via question bank filter8.3 HighmoodleUbuntuStored XSS risk in admin live log8.3 HighmoodleUbuntuStored XSS in ddimageortext question type3.4 LowmoodleUbuntuNon-searchable tags can still be discovered on the tag search page and in the tags block5.3 MediummoodleUbuntuFeedback response viewing and deletions did not respect Separate Groups mode6.5 MediummoodleUbuntuArbitrary file read risk through pdfTeX8.6 HighmoodleUbuntuMoodle: idor when accessing list of course badges4.3 MediummoodleUbuntuMoodle: lesson activity password bypass through php loose comparison5.4 MediummoodleUbuntuMoodle: idor when deleting oauth2 linked accounts7.5 HighmoodleUbuntuMoodle: unprotected access to sensitive information via dynamic tables6.5 MediummoodleUbuntuMoodle: idor when fetching report schedules4.3 MediummoodleUbuntuMoodle: some users can delete audiences of other reports4.3 MediummoodleUbuntuMoodle: idor in edit/delete rss feed4.3 MediummoodleUbuntuMoodle: users' names returned in messaging error message4.3 MediummoodleUbuntuMoodle: reflected xss via h5p error message5.4 MediummoodleUbuntuMoodle: xss risk when restoring malicious course backup file5.4 MediummoodleUbuntuMoodle: can create global glossary without being admin5.3 MediummoodleUbuntuMoodle: matrix user/power level management not always working as expected with suspended users5.3 MediummoodleUbuntuMoodle: authorization headers preserved between "emulated redirects"5.3 MediummoodleUbuntuMoodle: lack of access control when using external methods for quiz overrides5.3 MediummoodleUbuntuMoodle: user information visibility control issues in gradebook reports5.3 MediummoodleUbuntuMoodle: admin presets export tool includes some secrets that should not be exported3.7 LowmoodleUbuntuMoodle: lfi vulnerability when restoring malformed block backups7.5 HighmoodleUbuntuMoodle: idor in feedback non-respondents report allows messaging arbitrary site users7.5 HighmoodleUbuntuMoodle: site administration sql injection via xmldb editor7.2 HighmoodleUbuntuMoodle: csrf risk in feedback non-respondents report8.1 HighmoodleUbuntuMoodle: idor in badges allows deletion of arbitrary badges7.5 HighmoodleUbuntuMoodle: cache poisoning via injection into storage7.7 HighmoodleUbuntuMoodle: arbitrary file read risk through pdftex7.5 HighmoodleUbuntuMoodle: remote code execution via calculated question types8.1 HighmoodleUbuntuCross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute...5.5 MediummoodleUbuntumoodle: CSRF risks due to misuse of confirm_sesskey8.8 HighmoodleUbuntumoodle: HTTP authorization header is preserved between "emulated redirects"7.5 HighmoodleUbuntumoodle: stored XSS via calendar's event title when deleting the event6.1 MediummoodleUbuntumoodle: BigBlueButton web service leaks meeting joining information to users who should not have access5.4 MediummoodleUbuntumoodle: ReCAPTCHA can be bypassed on the login page7.5 HighmoodleUbuntumoodle: CSRF risk in analytics management of models8.8 HighmoodleUbuntumoodle: logout CSRF in admin/tool/mfa/auth.php8.8 HighmoodleUbuntumoodle: unsanitized HTML in site log for config_log_created4.3 MediummoodleUbuntumoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup6.5 Medium- Show moreLoading…