Aller au contenu

Vulnérabilités de n/a Moodle 3.x

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2018-1045 In Moodle 3.x, there is XSS via a calendar event name Non notée 22 janv. 2018
CVE-2018-1044 In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings Non notée 22 janv. 2018
CVE-2018-1043 In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames Non notée 22 janv. 2018
CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker Non notée 22 janv. 2018
CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course Non notée 20 nov. 2017
CVE-2017-12157 In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access Non notée 18 sept. 2017
CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback Non notée 18 sept. 2017
CVE-2017-2645 In Moodle 3.x, XSS can occur via attachments to evidence of prior learning Non notée 26 mars 2017
CVE-2017-2644 In Moodle 3.x, XSS can occur via evidence of prior learning Non notée 26 mars 2017
CVE-2017-2578 In Moodle 3.x, there is XSS in the assignment submission page Non notée 20 janv. 2017

Autres produits n/a