Vulnerabilities of n/a Moodle
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-40208 | In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… | 4.3 Medium | Mar 24, 2023 |
| CVE-2021-36400 | In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions | 5.3 Medium | Mar 6, 2023 |
| CVE-2021-36399 | In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk | 5.4 Medium | Mar 6, 2023 |
| CVE-2021-36398 | In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS… | 5.4 Medium | Mar 6, 2023 |
| CVE-2021-36397 | In Moodle, insufficient capability checks meant message deletions were not limited to the current user | 5.3 Medium | Mar 6, 2023 |
| CVE-2021-36396 | In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports… | 7.5 High | Mar 6, 2023 |
| CVE-2021-36403 | In Moodle, in some circumstances, email notifications of messages could have the link back to the original message… | 5.3 Medium | Mar 6, 2023 |
| CVE-2021-36395 | In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… | 7.5 High | Mar 6, 2023 |
| CVE-2021-36402 | In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… | 5.3 Medium | Mar 6, 2023 |
| CVE-2021-36394 | In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin | Not rated | Mar 6, 2023 |
| CVE-2021-36401 | In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk | 4.8 Medium | Mar 6, 2023 |
| CVE-2021-36393 | In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses | Not rated | Mar 6, 2023 |
| CVE-2021-36392 | In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses | Not rated | Mar 6, 2023 |
| CVE-2022-45152 | A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle | 9.1 Critical | Nov 25, 2022 |
| CVE-2022-45151 | The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied… | 5.4 Medium | Nov 23, 2022 |
| CVE-2022-45150 | A reflected cross-site scripting vulnerability was discovered in Moodle | 6.1 Medium | Nov 23, 2022 |
| CVE-2022-45149 | A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course… | 5.4 Medium | Nov 23, 2022 |
| CVE-2022-2986 | Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk | Not rated | Oct 6, 2022 |
| CVE-2022-40316 | The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to… | 4.3 Medium | Sep 30, 2022 |
| CVE-2022-40315 | A limited SQL injection risk was identified in the "browse list of users" site administration page | 9.8 Critical | Sep 30, 2022 |
| CVE-2022-40313 | Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or… | 7.1 High | Sep 30, 2022 |
| CVE-2022-40314 | A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified | 9.8 Critical | Sep 30, 2022 |
| CVE-2020-14320 | In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a… | Not rated | Aug 16, 2022 |
| CVE-2020-1756 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin… | Not rated | Aug 16, 2022 |
| CVE-2020-1755 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to… | Not rated | Aug 16, 2022 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79
ImageMagick 69