Skip to content

Vulnerabilities of n/a Moodle

Is your version affected?

CVE Summary Score Published
CVE-2022-0334 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions Not rated Jan 25, 2022
CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions Not rated Jan 25, 2022
CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4 Not rated Jan 25, 2022
CVE-2021-40691 A session hijack risk was identified in the Shibboleth authentication plugin Not rated Jan 21, 2022
CVE-2021-40695 It was possible for a student to view their quiz grade before it had been released, using a quiz web service Not rated Jan 21, 2022
CVE-2021-40692 Insufficient capability checks made it possible for teachers to download users outside of their courses Not rated Jan 21, 2022
CVE-2021-40693 An authentication bypass risk was identified in the external database authentication functionality, due to a type… Not rated Jan 21, 2022
CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP… Not rated Jan 21, 2022
CVE-2021-43560 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Not rated Nov 22, 2021
CVE-2021-43559 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Not rated Nov 22, 2021
CVE-2021-43558 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Not rated Nov 22, 2021
CVE-2021-3943 A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Not rated Nov 22, 2021
CVE-2021-21809 A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10 8.2 High Jun 23, 2021
CVE-2019-14827 A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive… Not rated May 17, 2021
CVE-2019-14831 A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where… Not rated Mar 19, 2021
CVE-2019-14830 A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the… Not rated Mar 19, 2021
CVE-2019-14829 A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported… Not rated Mar 19, 2021
CVE-2019-14828 A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions,… Not rated Mar 19, 2021
CVE-2021-20283 The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had… Not rated Mar 15, 2021
CVE-2021-20282 When creating a user account, it was possible to verify the account without having access to the verification email… Not rated Mar 15, 2021
CVE-2021-20281 It was possible for some users without permission to view other users' full names to do so via the online users block in… Not rated Mar 15, 2021
CVE-2021-20280 Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before… Not rated Mar 15, 2021
CVE-2021-20279 The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2,… Not rated Mar 15, 2021
CVE-2021-20185 It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit… Not rated Jan 28, 2021
CVE-2021-20184 It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade… Not rated Jan 28, 2021

Other n/a products