Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: jleyva Clear all filters
TI-2026-76937 CVE-2026-113608 · GHSA-7qwj-4vq5-8c2j

SQL injection in Configurable Reports block for Moodle lets users read data

Priority LOW 27

Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in report_sql::prepare_sql() via the filter_var request parameter of viewreport.php.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00391 Published 2026-10-20 Fixed in 5.3.1 CWE-89
TI-2026-76936 CVE-2026-113607 · GHSA-7v7c-h53q-gqrm

Incorrect authorization in Moodle Configurable Reports block exposes reports

Priority LOW 32

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block_configurable_reports_get_report_data web serv…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00424 Published 2026-10-20 Fixed in 5.3.0 CWE-863