Vulnerabilities

TI-2022-11252 CVE-2022-28601 · GHSA-pghm-m86j-5288

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle"…

LOW 32

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01756 Published 2022-05-10 No fix listed CWE-863

TI-2022-11568 CVE-2022-28986 · GHSA-g8xq-6p86-29mq

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an…

LOW 37

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, pas…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02336 Published 2022-05-10 No fix listed CWE-639

Vulnerabilities

Filters

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle"…

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an…