Skip to contentMoodle vulnerabilities
Newest
- moodleMoodle: xss risk when outputting database activity filter dataCVE-2023-28331Fix available6.1 Medium
- moodleMoodle: authenticated arbitrary file read through malformed backup fileCVE-2023-28330Fix available6.5 Medium
- moodleMoodle: authenticated sql injection via availability checkCVE-2023-28329Fix available8.8 High
- moodleMoodle: course participation report shows roles the user should not seeCVE-2023-1402Fix available4.3 Medium
- moodleMoodle has a Hidden Functionality vulnerabilityCVE-2021-36403Fix available5.3 Medium
- moodleMoodle Improper Input Validation vulnerabilityCVE-2021-36402Fix available5.3 Medium
- moodleMoodle vulnerable to Stored Cross-site ScriptingCVE-2021-36401Fix available4.8 Medium
- moodleMoodle has Incorrect Default PermissionsCVE-2021-36400Fix available5.3 Medium
- moodleMoodle Cross-site Scripting vulnerabilityCVE-2021-36399Fix available5.4 Medium
- moodleMoodle Cross-site Scripting vulnerabilityCVE-2021-36398Fix available5.4 Medium
- moodleMoodle has Incorrect Default PermissionsCVE-2021-36397Fix available5.3 Medium
- moodleMoodle vulnerable to Server-Side Request ForgeryCVE-2021-36396Public exploitFix available7.5 High
- moodleMoodle vulnerable to Uncontrolled Resource ConsumptionCVE-2021-36395Fix available7.5 High
- moodleMoodle Session Fixation vulnerabilityCVE-2021-36394Public exploitFix available9.8 Critical
- moodleMoodle SQL Injection vulnerabilityCVE-2021-36393Public exploitFix availableEPSS 52.3%9.8 Critical
- moodleMoodle SQL Injection vulnerabilityCVE-2021-36392Fix available9.8 Critical
- moodleMoodle: possible to set the preferred "start page" of other usersCVE-2023-23923Fix available8.2 High
- moodleMoodle: reflected xss risk in blog searchCVE-2023-23922Fix available6.1 Medium
- moodleMoodle: reflected xss risk in some returnurl parametersCVE-2023-23921Fix available6.1 Medium
- moodle plugin - saml auth plugin - saml auth, moodle saml authentication +1 moreMoodle Plugin - SAML Auth Open RedirectCVE-2022-391836.5 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider libraryCVE-2022-45152Fix available9.1 Critical
- moodle, fedoraproject fedora +1 moreMoodle stored-XSS vulnerability in some "social" user profile fieldsCVE-2022-45151Fix available5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle reflected cross-site scripting vulnerability in policy toolCVE-2022-45150Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreCross-Site Request Forgery in MoodleCVE-2022-45149Fix available5.4 Medium
- moodleMoodle Cross-Site Request Forgery (CSRF)CVE-2022-2986Fix available8.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle No groups filtering in H5P activity attempts reportCVE-2022-40316Fix available4.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Minor SQL injection risk in admin user browsingCVE-2022-40315Fix available9.8 Critical
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Stored Cross-site Scripting and page denial of serviceCVE-2022-40313Fix available7.1 High
- moodleMoodle remote code executionCVE-2022-40314Fix available9.8 Critical
- moodle, fedoraproject fedora +1 moreMoodle Cross-site Scripting vulnerabilityCVE-2021-36568Fix available5.4 Medium
- moodleMoodle reflected XSS VulnerabilityCVE-2020-14320Fix available6.1 Medium
- moodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the...CVE-2020-1756Fix available7.2 High
- moodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a...CVE-2020-1755Fix available5.3 Medium
- moodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it...CVE-2020-14322Fix available7.5 High
- moodleMoodle Incorrect Authorization vulnerabilityCVE-2020-14321Public exploitFix availableEPSS 16.0%8.8 High
- moodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without...CVE-2020-1754Fix available4.3 Medium
- moodleMoodle XSS VulnerabilityCVE-2020-1691Fix available5.4 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle LTI module reflected XSS riskCVE-2022-35653Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Open redirect risk in mobile auto-login featureCVE-2022-35652Fix available6.1 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle Stored XSS and blind SSRF possible via SCORM track detailsCVE-2022-35651Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Arbitrary file read when importing lesson questionsCVE-2022-35650Public exploitFix availableEPSS 53.7%7.5 High
- moodle, fedoraproject fedora +1 moreMoodle PostScript Code InjectionCVE-2022-35649Public exploitFix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreIncorrect Calculation in moodleCVE-2022-30600Public exploitFix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreSQL injection in moodleCVE-2022-30599Fix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information in moodleCVE-2022-30598Fix available4.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExternal Control of Assumed-Immutable Web Parameter in moodleCVE-2022-30597Fix available5.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreCross-site Scripting in moodleCVE-2022-30596Fix available5.4 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMissing authorization in MoodleCVE-2022-0984Fix available4.3 Medium
- moodleImproper Authentication in moodleCVE-2022-0985Fix available4.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreSQL Injection in MoodleCVE-2022-0983Fix available8.8 High
- Show moreLoading…