Moodle: stored xss in quiz grading report via user id number
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости moodle · Страница 7
За последние 30 дней в moodle опубликовано уязвимостей: 12; в каталоге KEV: 0.
Уязвимостей: 323
Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
Опубликовано ОбновленоMoodle: stored xss and potential idor risk in wiki comments
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
Опубликовано ОбновленоMoodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
Опубликовано ОбновленоMoodle: xss risk when using csv grade import method
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
Опубликовано ОбновленоMoodle: authenticated remote code execution risk in imscp
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.
Опубликовано ОбновленоMoodle: authenticated remote code execution risk in lesson
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.
Опубликовано ОбновленоUBUNTU-CVE-2023-40325
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40324
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40323
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40322
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40321
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40320
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40319
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40318
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40317
[Unknown description]
Опубликовано ОбновленоUBUNTU-CVE-2023-40316
[Unknown description]
Опубликовано ОбновленоMoodle: ssrf risk due to insufficient check on the curl blocked hosts
An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Опубликовано ОбновленоMoodle: minor sql injection risk on mnet sso access control page
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Опубликовано ОбновленоMoodle: xss risk on groups page
Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.