Skip to content[unknown] Moodle vulnerabilities
- [unknown] moodleMoodle vulnerable to RCECVE-2020-10738Fix available7.5 High
- [unknown] moodleMoodle Oauth 2 Insufficiently Protects Against CompromiseCVE-2019-14880Fix available4.8 Medium
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-14881Fix available6.1 Medium
- [unknown] moodleMoodle reflected Cross-site Scripting (XSS)CVE-2019-14884Fix available6.1 Medium
- [unknown] moodleMoodle Email media URL tokens were not checking for user statusCVE-2019-14883Fix available3.7 Low
- [unknown] moodleMoodle open redirect vulnerabilityCVE-2019-14882Fix available3.1 Low
- [unknown] moodleMoodle does not revoke role capabilities correctlyCVE-2019-14879Fix available4.2 Medium
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-3847Public exploitFix available5.4 Medium
- [unknown] moodleMoodle context freezingCVE-2019-3852Fix available4.3 Medium
- [unknown] moodle, fedoraproject fedora +1 moreMoodle Secure layout contained an insecure link in Boost themeCVE-2019-3851Fix available4.3 Medium
- [unknown] moodleMoodle Stored HTML in assignment submission comments allowed links to be opened directlyCVE-2019-3850Fix available4.3 Medium
- [unknown] moodleMoodle Users could elevate their role when accessing the LTI tool on a provider siteCVE-2019-3849Fix available6.3 Medium
- [unknown] moodleMoodle Logged in users could view all calendar eventsCVE-2019-3848Fix available4.3 Medium
- [unknown] moodleMoodle Blind SSRF Risk in /badges/mybackpack.phpCVE-2019-3809Fix available6.5 Medium
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-3808Fix available4.3 Medium
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-3810Public exploitFix availableEPSS 13.8%4.3 Medium
- [unknown] moodleMoodle Login CSRF vulnerability in login formCVE-2018-16854Public exploitFix available6.5 Medium
- [unknown] moodleMoodle Cross-site ScriptingCVE-2018-14631Fix available8.8 High
- [unknown] moodleMoodle XML import of ddwtos could lead to intentional remote code executionCVE-2018-14630Fix available8.8 High
- [unknown] moodleMoodle XSS VulnerabilityCVE-2018-10891Fix available6.3 Medium
- [unknown] moodleMoodle Exposure of Sensitive Information to an Unauthorized ActorCVE-2018-10890Fix available4.3 Medium
- [unknown] moodleMoodle sensitive information disclosureCVE-2018-10889Fix available4.3 Medium