Skip to contentMoodle vulnerabilities
Newest
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-14881Fix available6.1 Medium
- [unknown] moodleMoodle reflected Cross-site Scripting (XSS)CVE-2019-14884Fix available6.1 Medium
- [unknown] moodleMoodle Email media URL tokens were not checking for user statusCVE-2019-14883Fix available3.7 Low
- [unknown] moodleMoodle open redirect vulnerabilityCVE-2019-14882Fix available3.1 Low
- moodleCross-Site Request Forgery in MoodleCVE-2020-1692Fix available8.1 High
- moodleMoodle Persistent Cross-site Scripting (XSS)CVE-2019-182105.4 Medium
- [unknown] moodleMoodle does not revoke role capabilities correctlyCVE-2019-14879Fix available4.2 Medium
- moodle, fedoraproject fedora +1 moreMoodle before 2.2.2: Course information leak via hidden courses being displayed in tag search...CVE-2012-11614.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle before 2.2.2 has an external enrolment plugin context check issue where capability checks...CVE-2012-11707.5 High
- moodle, fedoraproject fedora +1 moreMoodle before 2.2.2 has Personal information disclosure, when administrative setting users name...CVE-2012-11695.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can...CVE-2012-11602.7 Low
- moodle, fedoraproject fedora +1 moreMoodle included private user files in course backupsCVE-2012-1159Fix available4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden...CVE-2012-11584.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle default permissions too permissiveCVE-2012-1157Fix available4.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle backs up private filesCVE-2012-1156Fix available7.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle before 2.2.2 has a password and web services issue where when the user profile is updated...CVE-2012-11688.2 High
- moodle, debian linux, fedoraproject fedora +1 more +3 moreMoodle has a database activity export permission issue where the export function of the database...CVE-2012-11557.5 High
- moodleMoodle CSRF VulnerabilityCVE-2019-10186Fix available6.5 Medium
- moodleMoodle Ability to delete glossary entries that belong to another glossaryCVE-2019-10187Fix available4.0 Medium
- moodlemoodle Improper Access ControlCVE-2019-10188Fix available4.0 Medium
- moodlemoodle Improper Access ControlCVE-2019-10189Fix available4.0 Medium
- moodleMoodle all messaging conversations could be viewedCVE-2019-10154Fix available6.5 Medium
- moodleMoodle Private files uploaded via incoming mail processing could bypass quota restrictionsCVE-2019-10134Fix available4.2 Medium
- moodleMoodle Open Redirect VulnerabilityCVE-2019-10133Fix available3.1 Low
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-3847Public exploitFix available5.4 Medium
- [unknown] moodleMoodle context freezingCVE-2019-3852Fix available4.3 Medium
- [unknown] moodle, fedoraproject fedora +1 moreMoodle Secure layout contained an insecure link in Boost themeCVE-2019-3851Fix available4.3 Medium
- [unknown] moodleMoodle Stored HTML in assignment submission comments allowed links to be opened directlyCVE-2019-3850Fix available4.3 Medium
- [unknown] moodleMoodle Users could elevate their role when accessing the LTI tool on a provider siteCVE-2019-3849Fix available6.3 Medium
- [unknown] moodleMoodle Logged in users could view all calendar eventsCVE-2019-3848Fix available4.3 Medium
- [unknown] moodleMoodle Blind SSRF Risk in /badges/mybackpack.phpCVE-2019-3809Fix available6.5 Medium
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-3808Fix available4.3 Medium
- [unknown] moodleMoodle XSS VulnerabilityCVE-2019-3810Public exploitFix availableEPSS 13.8%4.3 Medium
- moodleMoodle SSRF VulnerabilityCVE-2019-6970Fix available7.5 High
- [unknown] moodleMoodle Login CSRF vulnerability in login formCVE-2018-16854Public exploitFix available6.5 Medium
- [unknown] moodleMoodle Cross-site ScriptingCVE-2018-14631Fix available8.8 High
- [unknown] moodleMoodle XML import of ddwtos could lead to intentional remote code executionCVE-2018-14630Fix available8.8 High
- [unknown] moodleMoodle XSS VulnerabilityCVE-2018-10891Fix available6.3 Medium
- [unknown] moodleMoodle Exposure of Sensitive Information to an Unauthorized ActorCVE-2018-10890Fix available4.3 Medium
- [unknown] moodleMoodle sensitive information disclosureCVE-2018-10889Fix available4.3 Medium
- moodleMoodle Portfolio script allows instantiation of class chosen by userCVE-2018-1137Fix available8.1 High
- moodleMoodle Cross-site ScriptingCVE-2018-1136Fix available4.3 Medium
- moodleMoodle Portfolio forum caller class allows a user to download any fileCVE-2018-1135Fix available6.5 Medium
- moodleMoodle Improper Privilege ManagementCVE-2018-1134Fix available6.5 Medium
- moodleMoodle calculated question type allows remote code execution by Question authorsCVE-2018-1133Public exploitFix availableEPSS 30.8%8.8 High
- moodleMoodle Improper AuthenticationCVE-2018-1082Fix available8.1 High
- moodleMoodle Unauthenticated users can trigger custom messages to admin via paypal enrol scriptCVE-2018-1081Fix available5.3 Medium
- moodleMoodle XSS VulnerabilityCVE-2018-1045Fix available5.4 Medium
- moodleMoodle Privilege escalation in quiz web servicesCVE-2018-1044Fix available4.3 Medium
- moodleMoodle Setting for blocked hosts list can be bypassed with multiple A record hostnamesCVE-2018-1043Fix available6.5 Medium
- Show moreLoading…