Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Moodle — FEDORA-2022-81ce74b2dd Clear all filters
TI-2022-16119 CVE-2022-35653 · GHSA-62wh-m4jr-233r

Cross-site scripting in Moodle

Priority LOW 35

A reflected XSS issue was identified in the LTI module of Moodle.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04842 Published 2022-07-25 Fixed in 4.0.2, 3.11.8 +1 CWE-79
TI-2022-16118 CVE-2022-35652 · GHSA-243v-5pff-qqfj

Open redirect in Moodle

Priority LOW 29

An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01089 Published 2022-07-25 Fixed in 4.0.2, 3.11.8 +1 CWE-601
TI-2022-16117 CVE-2022-35651 · GHSA-wwv7-h477-wrv7

Cross-site scripting in Moodle

Priority LOW 29

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01077 Published 2022-07-25 Fixed in 3.9.15, 3.11.8 +1 CWE-79
TI-2022-16116 CVE-2022-35650 · GHSA-pgm5-cr62-prxq

Path traversal in Moodle

Priority HIGH 65

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.53652 Published 2022-07-25 Fixed in 3.9.15, 3.11.8 +1 CWE-22
TI-2022-16115 CVE-2022-35649 · GHSA-xp2f-9mx3-3c6p

Code injection in Moodle

Priority MEDIUM 53

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08554 Published 2022-07-25 Fixed in 3.9.15, 3.11.8 +1 CWE-94