Moodle : Security Vulnerabilities (CVSS score between 5 and 5.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-30597			2022-05-18	2022-06-13	5.0	None	Remote	Low	Not required	Partial	None	None
A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.
2	CVE-2022-0333	863		2022-01-25	2022-02-01	5.5	None	Remote	Low	???	Partial	Partial	None
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.
3	CVE-2021-43560	668		2021-11-22	2022-06-14	5.0	None	Remote	Low	Not required	Partial	None	None
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.
4	CVE-2021-32476	770		2022-03-11	2022-12-02	5.0	None	Remote	Low	Not required	None	None	Partial
A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
5	CVE-2021-32473			2022-03-11	2022-03-18	5.0	None	Remote	Low	Not required	Partial	None	None
It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected
6	CVE-2021-20282	863		2021-03-15	2021-03-23	5.0	None	Remote	Low	Not required	None	Partial	None
When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
7	CVE-2021-20281	863		2021-03-15	2022-08-05	5.0	None	Remote	Low	Not required	Partial	None	None
It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
8	CVE-2021-20185	770	DoS	2021-01-28	2022-10-21	5.0	None	Remote	Low	Not required	None	None	Partial
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.
9	CVE-2020-25703	200	+Info	2020-11-19	2021-10-19	5.0	None	Remote	Low	Not required	Partial	None	None
The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10.
10	CVE-2020-25701	863		2020-11-19	2020-12-01	5.0	None	Remote	Low	Not required	None	Partial	None
If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
11	CVE-2020-25699	863		2020-11-19	2022-11-07	5.0	None	Remote	Low	Not required	None	Partial	None
In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
12	CVE-2020-25698			2020-11-19	2020-12-02	5.0	None	Remote	Low	Not required	None	Partial	None
Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
13	CVE-2020-25630	400	DoS	2020-12-08	2020-12-08	5.0	None	Remote	Low	Not required	None	None	Partial
A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
14	CVE-2019-14882	601		2020-03-18	2020-03-19	5.8	None	Remote	Medium	Not required	Partial	Partial	None
A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.
15	CVE-2019-14879	273		2020-01-07	2020-03-31	5.5	None	Remote	Low	???	Partial	Partial	None
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).
16	CVE-2019-14831	601		2021-03-19	2021-03-22	5.8	None	Remote	Medium	Not required	Partial	Partial	None
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum's subscription mode was set to "forced subscription", the forum's subscribe link contained an open redirect.
17	CVE-2019-14830	601		2021-03-19	2021-03-22	5.8	None	Remote	Medium	Not required	Partial	Partial	None
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user's mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured, mobile service disabled, or where the mobile app login method is "via the app").
18	CVE-2019-10154			2019-06-26	2020-09-30	5.0	None	Remote	Low	Not required	Partial	None	None
A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.
19	CVE-2019-10133	601		2019-06-26	2019-10-09	5.8	None	Remote	Medium	Not required	Partial	Partial	None
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.
20	CVE-2019-3850	601		2019-03-26	2019-10-09	5.8	None	Remote	Medium	Not required	Partial	Partial	None
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.
21	CVE-2018-10890	200	+Info	2018-07-10	2019-10-09	5.0	None	Remote	Low	Not required	Partial	None	None
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.
22	CVE-2018-10889	532		2018-07-10	2019-10-09	5.0	None	Remote	Low	Not required	Partial	None	None
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.
23	CVE-2018-1137	20		2018-05-25	2018-06-25	5.5	None	Remote	Low	???	None	Partial	Partial
An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.
24	CVE-2018-1081			2018-04-04	2020-08-28	5.0	None	Remote	Low	Not required	None	Partial	None
A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.
25	CVE-2017-7490	668		2017-05-15	2019-10-03	5.0	None	Remote	Low	Not required	Partial	None	None
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
26	CVE-2017-2643	200	+Info	2017-03-26	2017-07-12	5.0	None	Remote	Low	Not required	Partial	None	None
In Moodle 3.2.x, global search displays user names for unauthenticated users.
27	CVE-2017-2576	20		2017-01-20	2020-12-01	5.0	None	Remote	Low	Not required	None	Partial	None
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
28	CVE-2016-8644	264		2017-01-20	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
29	CVE-2016-8642	284		2017-01-20	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
30	CVE-2016-7919	200	Sql +Info	2016-10-28	2016-12-02	5.0	None	Remote	Low	Not required	Partial	None	None
DISPUTED Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component. NOTE: the vendor disputes the relevance of this report, noting that "the person who is installing Moodle must know database access credentials and they can access the database directly; there is no need for them to create a SQL injection in one of the installation dialogue fields."
31	CVE-2016-7038	640		2017-01-20	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
32	CVE-2016-5014	200	+Info	2017-01-20	2020-12-01	5.8	None	Remote	Medium	Not required	Partial	Partial	None
In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.
33	CVE-2016-5013	74		2017-01-20	2020-12-01	5.8	None	Remote	Medium	Not required	Partial	Partial	None
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
34	CVE-2016-5012	200	+Info	2017-01-20	2017-01-25	5.0	None	Remote	Low	Not required	Partial	None	None
In Moodle 3.x, glossary search displays entries without checking user permissions to view them.
35	CVE-2016-3731	200	+Info	2017-04-20	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.
36	CVE-2016-2190	264	+Info	2016-05-22	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.
37	CVE-2015-5267	200	+Info	2016-02-22	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.
38	CVE-2015-5264	264	Bypass	2016-02-22	2020-12-01	5.5	None	Remote	Low	???	Partial	Partial	None
The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role.
39	CVE-2015-3272			2016-02-22	2020-12-01	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer header that has a substring match with a local URL.
40	CVE-2015-3175			2015-06-01	2020-12-01	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header.
41	CVE-2014-9060	20		2014-11-24	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
The LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not properly restrict the parameters used in a return URL, which allows remote attackers to trigger the generation of arbitrary messages via a modified URL, related to mod/lti/locallib.php and mod/lti/return.php.
42	CVE-2014-7848	200	+Info	2014-11-24	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
43	CVE-2014-7847	399	DoS	2014-11-24	2020-12-01	5.0	None	Remote	Low	Not required	None	None	Partial
iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service (resource consumption) by triggering the calculation of an estimated latitude and longitude for an IP address.
44	CVE-2014-7837	264		2014-11-24	2020-12-01	5.5	None	Remote	Low	???	None	Partial	Partial
mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki.
45	CVE-2014-3546	264	+Info	2014-07-29	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.
46	CVE-2014-0216	264	+Info	2014-05-27	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.
47	CVE-2014-0125	264	Bypass	2014-03-24	2020-12-01	5.8	None	Remote	Medium	Not required	Partial	Partial	None
repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner.
48	CVE-2014-0009	264		2014-01-20	2020-12-01	5.5	None	Remote	Low	???	Partial	Partial	None
course/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 does not enforce the moodle/site:accessallgroups capability requirement for outside-group users in a SEPARATEGROUPS configuration, which allows remote authenticated users to perform "login as" actions via a direct request.
49	CVE-2013-4522	200	+Info	2013-11-26	2020-12-01	5.0	None	Remote	Low	Not required	Partial	None	None
lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.
50	CVE-2013-2083	20	Bypass	2013-05-25	2020-12-01	5.0	None	Remote	Low	Not required	None	Partial	None
The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request.

Total number of vulnerabilities : 103 Page : 1 (This Page)2 3