Read the docs

jleyva

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

jleyva records in CISA KEV

No jleyva vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-76936 CVE-2026-113607 · GHSA-7v7c-h53q-gqrm

Incorrect authorization in Moodle Configurable Reports block exposes reports

Priority LOW 32

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block_configurable_reports_get_report_data web serv…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00424 Published 2026-10-20 Fixed in 5.3.0 CWE-863
TI-2026-76937 CVE-2026-113608 · GHSA-7qwj-4vq5-8c2j

SQL injection in Configurable Reports block for Moodle lets users read data

Priority LOW 27

Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in report_sql::prepare_sql() via the filter_var request parameter of viewreport.php.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00391 Published 2026-10-20 Fixed in 5.3.1 CWE-89
Open these records in search →