Skip to content

Vulnerabilities of n/a Moodle 3.x

Is your version affected?

CVE Summary Score Published
CVE-2018-1045 In Moodle 3.x, there is XSS via a calendar event name Not rated Jan 22, 2018
CVE-2018-1044 In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings Not rated Jan 22, 2018
CVE-2018-1043 In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames Not rated Jan 22, 2018
CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker Not rated Jan 22, 2018
CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course Not rated Nov 20, 2017
CVE-2017-12157 In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access Not rated Sep 18, 2017
CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback Not rated Sep 18, 2017
CVE-2017-2645 In Moodle 3.x, XSS can occur via attachments to evidence of prior learning Not rated Mar 26, 2017
CVE-2017-2644 In Moodle 3.x, XSS can occur via evidence of prior learning Not rated Mar 26, 2017
CVE-2017-2578 In Moodle 3.x, there is XSS in the assignment submission page Not rated Jan 20, 2017

Other n/a products