Iniciar sesión
Deutsch English Español Polski
Media

Moodle cross-site scripting (XSS) vulnerability

  • Publicada: 13.05.2022
  • Actualizado: 11.10.2026 10:22

Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Paquete de Composer moodle/moodle < 2.7.10, >= 2.8.0, < 2.8.8, >= 2.9.0, < 2.9.2 2.7.10, 2.8.8, 2.9.2

Referencias

Puntuación CVSS 5.4/10
Vector CVSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Debilidad (CWE)
CWE-79
Plataforma
Composer
Paquete
moodle/moodle
Publicada
13.05.2022
Actualizado
11.10.2026 10:22

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-5729-822w-j342 - CC BY 4.0

Historial de vulnerabilidades: moodle/moodle

Todas las vulnerabilidades publicadas de este paquete (Paquete de Composer), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (437) en el archivo
Entradas en total
437
Primera → última
03.2021 02.2026
Sin corrección
10
Explotada en ataques
0

Distribución por gravedad

  • Crítica 16
  • Alta 68
  • Media 318
  • Baja 35

Divulgaciones por año

Gravedad:
  1. Moodle has a Remote Code Execution risk via file restore
    Alta · 7.2 CVE-2026-26045 >= 5.1.0-beta, < 5.1.2, >= 5.0.0-beta, < 5.0.5, < 4.5.9 5.1.2, 5.0.5, 4.5.9
  2. Moodle Affected by Improper Restriction of Excessive Authentication Attempts
    Alta · 7.5 CVE-2025-67853 < 4.1.22, >= 4.4.0-beta, < 4.4.12, >= 4.5.0-beta, < 4.5.8, >= 5.0.0-beta, < 5.0.4, >= 5.1.0-beta, < 5.1.1 4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1
  3. Moodle authentication bypass vulnerability
    Alta · 8.1 CVE-2025-67848 < 4.1.22, >= 4.4.0-beta, < 4.4.12, >= 4.5.0-beta, < 4.5.8, >= 5.0.0-beta, < 5.0.4, >= 5.1.0-beta, < 5.1.1 4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1
  4. Moodle Cross-site Scripting (XSS) vulnerability
    Alta · 7.3 CVE-2025-67849 < 4.1.22, >= 4.4.0-beta, < 4.4.12, >= 4.5.0-beta, < 4.5.8, >= 5.0.0-beta, < 5.0.4, >= 5.1.0-beta, < 5.1.1 4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1
  5. Moodle vulnerable to Cross-site Scripting
    Alta · 7.3 CVE-2025-67850 < 4.1.22, >= 4.4.0-beta, < 4.4.12, >= 4.5.0-beta, < 4.5.8, >= 5.0.0-beta, < 5.0.4, >= 5.1.0-beta, < 5.1.1 4.1.22, 4.4.12, 4.5.8, 5.0.4, 5.1.1
  6. Moodle affected by a code injection vulnerability
    Alta · 8.8 CVE-2025-67847 >= 5.1.0-beta, < 5.1.1, >= 5.0.0-beta, < 5.0.4, >= 4.5.0-beta, < 4.5.8, >= 4.2.0-beta, < 4.4.12, < 4.1.22 5.1.1, 5.0.4, 4.5.8, 4.4.12, 4.1.22
  7. Moodle vulnerable to brute-force password guesses
    Alta · 7.5 CVE-2025-62399 >= 5.0.0-beta, < 5.0.3, >= 4.5.0-beta, < 4.5.7, >= 4.2.0-beta, < 4.4.11, < 4.1.21 5.0.3, 4.5.7, 4.4.11, 4.1.21
  8. Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
    Alta · 8.8 CVE-2025-3642 < 4.1.18, >= 4.3.0-beta, < 4.3.12, >= 4.4.0-beta, < 4.4.8, >= 4.5.0-beta, < 4.5.4 4.1.18, 4.3.12, 4.4.8, 4.5.4
  9. Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
    Alta · 8.8 CVE-2025-3641 < 4.1.18, >= 4.3.0-beta, < 4.3.12, >= 4.4.0-beta, < 4.4.8, >= 4.5.0-beta, < 4.5.4 4.1.18, 4.3.12, 4.4.8, 4.5.4
  10. Moodle allows unauthenticated REST API user data exposure
    Alta · 7.5 CVE-2025-32044 >= 4.5.0-beta, < 4.5.3 4.5.3
  11. Moodle allows reflected XSS via question bank filter
    Alta · 8.3 CVE-2025-26530 >= 4.5.0-beta, < 4.5.2, >= 4.4.0-beta, < 4.4.6, >= 4.3.0-beta, < 4.3.10 4.5.2, 4.4.6, 4.3.10
  12. Moodle has a stored XSS risk in admin live log
    Alta · 8.3 CVE-2025-26529 >= 4.5.0-beta, < 4.5.2, >= 4.4.0-beta, < 4.4.6, >= 4.3.0-beta, < 4.3.10, < 4.1.16 4.5.2, 4.4.6, 4.3.10, 4.1.16
  13. Moodle has an arbitrary file read risk through pdfTeX
    Alta · 8.6 CVE-2025-26525 >= 4.5.0-beta, < 4.5.2, >= 4.4.0-beta, < 4.4.6, >= 4.3.0-beta, < 4.3.10, < 4.1.16 4.5.2, 4.4.6, 4.3.10, 4.1.16
  14. Moodle has a SQL injection risk in course search module list filter
    Alta · 8.1 CVE-2025-26533 >= 4.5.0-beta, < 4.5.2, >= 4.4.0-beta, < 4.4.6, >= 4.3.0-beta, < 4.3.10, < 4.1.16 4.5.2, 4.4.6, 4.3.10, 4.1.16
  15. Moodle Remote Code Execution vulnerability
    Alta · 8.1 CVE-2024-43425 < 4.1.12, >= 4.2.0-beta, < 4.2.9, >= 4.3.0-beta, < 4.3.6, >= 4.4.0-beta, < 4.4.2 4.1.12, 4.2.9, 4.3.6, 4.4.2
  16. Moodle has CSRF risk in Feedback non-respondents report
    Alta · 8.1 CVE-2024-43434 < 4.1.12, >= 4.2.0-beta, < 4.2.9, >= 4.3.0-beta, < 4.3.6, >= 4.4.0-beta, < 4.4.2 4.1.12, 4.2.9, 4.3.6, 4.4.2
  17. Moodle ReCAPTCHA can be bypassed on the login page
    Alta · 7.5 CVE-2024-34009 >= 4.3.0, < 4.3.4 4.3.4
  18. Moodle CSRF risk in analytics management of models
    Alta · 8.8 CVE-2024-34008 >= 4.3.0, < 4.3.4, >= 4.2.0, < 4.2.7, < 4.1.10 4.3.4, 4.2.7, 4.1.10
  19. Moodle Authenticated LFI risk in some misconfigured shared hosting environments
    Alta · 6.5 CVE-2024-34005 >= 4.3.0, < 4.3.4, >= 4.2.0, < 4.2.7, < 4.1.10 4.3.4, 4.2.7, 4.1.10
  20. Moodle Authenticated LFI risk in some misconfigured shared hosting environments
    Alta · 6.5 CVE-2024-34002 >= 4.3.0, < 4.3.4, >= 4.2.0, < 4.2.7, < 4.1.10 4.3.4, 4.2.7, 4.1.10
  21. Moodle CSRF risk in admin preset tool management of presets
    Alta · 8.4 CVE-2024-34001 >= 4.3.0, < 4.3.4, >= 4.2.0, < 4.2.7, < 4.1.10 4.3.4, 4.2.7, 4.1.10
  22. Moodle Improper Input Validation
    Alta CVE-2024-33999 >= 4.3.0, < 4.3.4 4.3.4
  23. Uncontrolled Resource Consumption in moodle
    Alta · 7.5 CVE-2024-25978 >= 4.3.0, < 4.3.3, >= 4.2.0, < 4.2.6, < 4.1.9 4.3.3, 4.2.6, 4.1.9
  24. Cross-Site Request Forgery in moodle
    Alta · 8.8 CVE-2024-25982 >= 4.3.0, < 4.3.3, >= 4.2.0, < 4.2.6, < 4.1.9 4.3.3, 4.2.6, 4.1.9
  25. Moodle Code Injection vulnerability
    Alta · 8.8 CVE-2023-5540 < 4.3.0-rc2 4.3.0-rc2
  26. Moodle vulnerable to Server Side Request Forgery
    Alta · 7.5 CVE-2023-35133 >= 4.2.0, < 4.2.1, >= 4.1.0, < 4.1.4, >= 4.0.0, < 4.0.9, >= 3.10.0, < 3.11.15, < 3.9.22 4.2.1, 4.1.4, 4.0.9, 3.11.15, 3.9.22
  27. Moodle SQL Injection vulnerability
    Alta · 7.3 CVE-2023-30944 < 4.2.0-rc2 4.2.0-rc2
  28. Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
    Crítica · 9.8 CVE-2023-28333 >= 4.1.0, < 4.1.2, >= 4.0.0, < 4.0.7, >= 3.11.0, < 3.11.13, < 3.9.20 4.1.2, 4.0.7, 3.11.13, 3.9.20
  29. Moodle SQL Injection vulnerability
    Alta · 8.8 CVE-2023-28329 >= 4.1.0, < 4.1.2, >= 4.0.0, < 4.0.7, >= 3.11.0, < 3.11.13, < 3.9.20 4.1.2, 4.0.7, 3.11.13, 3.9.20
  30. Moodle vulnerable to Cross-site Request Forgery
    Alta · 8.8 CVE-2023-28335 >= 4.1.0, < 4.1.2 4.1.2
  31. Moodle vulnerable to Uncontrolled Resource Consumption
    Alta · 7.5 CVE-2021-36395 >= 3.11.0-beta, < 3.11.1, >= 3.10.0-beta, < 3.10.5, < 3.9.8 3.11.1, 3.10.5, 3.9.8
  32. Moodle Session Fixation vulnerability
    Crítica · 9.8 CVE-2021-36394 >= 3.11.0-beta, < 3.11.1, >= 3.10.0-beta, < 3.10.5, < 3.9.8 3.11.1, 3.10.5, 3.9.8
  33. Moodle vulnerable to Server-Side Request Forgery
    Alta · 7.5 CVE-2021-36396 >= 3.11.0-beta, < 3.11.1, >= 3.10.0-beta, < 3.10.5, < 3.9.8 3.11.1, 3.10.5, 3.9.8
  34. Moodle SQL Injection vulnerability
    Crítica · 9.8 CVE-2021-36393 >= 3.11.0-beta, < 3.11.1, >= 3.10.0-beta, < 3.10.5, < 3.9.8 3.11.1, 3.10.5, 3.9.8
  35. Moodle SQL Injection vulnerability
    Crítica · 9.8 CVE-2021-36392 >= 3.11.0-beta, < 3.11.1, >= 3.10.0-beta, < 3.10.5, < 3.9.8 3.11.1, 3.10.5, 3.9.8
  36. Moodle Improper Access Control vulnerability
    Alta · 8.2 CVE-2023-23923 < 3.9.19, >= 3.10.0, < 3.11.12, >= 4.0.0-beta, < 4.0.6, >= 4.1.0-beta, < 4.1.1 3.9.19, 3.11.12, 4.0.6, 4.1.1
  37. Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
    Crítica · 9.1 CVE-2022-45152 >= 3.9, < 3.9.18, >= 3.11, < 3.11.11, >= 4.0, < 4.0.5 3.9.18, 3.11.11, 4.0.5
  38. Moodle Cross-Site Request Forgery (CSRF)
    Alta · 8.8 CVE-2022-2986 >= 3.11, < 3.11.9, >= 4.0, < 4.0.3 3.11.9, 4.0.3
  39. Moodle Minor SQL injection risk in admin user browsing
    Crítica · 9.8 CVE-2022-40315 >= 3.9, < 3.9.17, >= 3.11, < 3.11.10, >= 4.0, < 4.0.4 3.9.17, 3.11.10, 4.0.4
  40. Moodle remote code execution
    Crítica · 9.8 CVE-2022-40314 < 3.9.17, >= 3.11, < 3.11.10, >= 4.0, < 4.0.4 3.9.17, 3.11.10, 4.0.4
  41. Moodle Stored Cross-site Scripting and page denial of service
    Alta · 7.1 CVE-2022-40313 >= 3.9, < 3.9.17, >= 3.11, < 3.11.10, >= 4.0, < 4.0.4 3.9.17, 3.11.10, 4.0.4
  42. Moodle Incorrect Authorization vulnerability
    Alta · 8.8 CVE-2020-14321 >= 3.9.0-beta, < 3.9.1, >= 3.8.0-beta, < 3.8.4, >= 3.6.0-beta, < 3.7.7, < 3.5.13 3.9.1, 3.8.4, 3.7.7, 3.5.13
  43. Moodle PostScript Code Injection
    Crítica · 9.8 CVE-2022-35649 >= 3.9, < 3.9.15, >= 3.11, < 3.11.8, >= 4.0, < 4.0.2 3.9.15, 3.11.8, 4.0.2
  44. Moodle Arbitrary file read when importing lesson questions
    Alta · 7.5 CVE-2022-35650 >= 3.9, < 3.9.15, >= 3.11, < 3.11.8, >= 4.0, < 4.0.2 3.9.15, 3.11.8, 4.0.2
  45. Moodle contains CSRF vulnerability
    Alta · 8.8 CVE-2021-43559 >= 3.11, < 3.11.4, >= 3.10, < 3.10.8, >= 3.9, < 3.9.11 3.11.4, 3.10.8, 3.9.11
  46. Moodle command execution vulnerability exists in the default legacy spellchecker plugin
    Crítica · 9.1 CVE-2021-21809 = 3.10.0, = 3.11.2, = 3.8.0 sin corrección
  47. Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration
    Alta · 7.2 CVE-2021-20187 >= 3.5, < 3.5.16, >= 3.8, < 3.8.7, >= 3.9, < 3.9.4, >= 3.10, < 3.10.1 3.5.16, 3.8.7, 3.9.4, 3.10.1
  48. Moodle Denial of Service
    Alta · 7.5 CVE-2020-25630 >= 3.9, < 3.9.2, >= 3.8, < 3.8.5, >= 3.7, < 3.7.8, >= 3.5, < 3.5.14 3.9.2, 3.8.5, 3.7.8, 3.5.14
  49. Moodle incorrect access control
    Alta · 8.8 CVE-2020-25629 >= 3.9, < 3.9.2, >= 3.8, < 3.8.5, >= 3.7, < 3.7.8, >= 3.5, < 3.5.14 3.9.2, 3.8.5, 3.7.8, 3.5.14
  50. Moodle vulnerable to RCE
    Alta · 8.8 CVE-2020-10738 >= 3.8, < 3.8.3, >= 3.7, < 3.7.6, >= 3.6, < 3.6.10, >= 3.5, < 3.5.12 3.8.3, 3.7.6, 3.6.10, 3.5.12
  51. Moodle Oauth 2 Insufficiently Protects Against Compromise
    Crítica · 9.1 CVE-2019-14880 >= 3.7.0, < 3.7.3, >= 3.6.0, < 3.6.7, >= 3.5.0, < 3.5.9 3.7.3, 3.6.7, 3.5.9
  52. Moodle CSRF Vulnerability
    Alta · 8.8 CVE-2019-10186 >= 3.7.0, < 3.7.1, >= 3.6.0, < 3.6.5, >= 3.5.0, < 3.5.7 3.7.1, 3.6.5, 3.5.7
  53. Moodle all messaging conversations could be viewed
    Alta · 7.5 CVE-2019-10154 >= 3.6, < 3.6.4 3.6.4
  54. Incorrect Calculation in moodle
    Crítica · 9.8 CVE-2022-30600 >= 4.0, < 4.0.1, >= 3.9, < 3.9.14, >= 3.10, < 3.10.11, >= 3.11, < 3.11.7 4.0.1, 3.9.14, 3.10.11, 3.11.7
  55. SQL injection in moodle
    Crítica · 9.8 CVE-2022-30599 >= 4.0, < 4.0.1, >= 3.11, < 3.11.7, >= 3.10, < 3.10.11, >= 3.9, < 3.9.14 4.0.1, 3.11.7, 3.10.11, 3.9.14
  56. Moodle Unrestricted file upload vulnerability
    Alta · 8.8 CVE-2016-9187 >= 2.0.1, <= 3.2.1 sin corrección
  57. Moodle SQL injection via user preferences
    Crítica · 9.8 CVE-2017-2641 >= 2.7, < 2.7.19, >= 3.0, < 3.0.9, >= 3.1, < 3.1.5, >= 3.2, < 3.2.2 2.7.19, 3.0.9, 3.1.5, 3.2.2
  58. Moodle Portfolio script allows instantiation of class chosen by user
    Alta · 8.1 CVE-2018-1137 >= 3.1, < 3.1.12, >= 3.2, < 3.2.9, >= 3.3, < 3.3.6, >= 3.4, < 3.4.3 3.1.12, 3.2.9, 3.3.6, 3.4.3
  59. Moodle SSRF Vulnerability
    Alta · 7.5 CVE-2019-6970 >= 3.5.0, < 3.5.4 3.5.4
  60. Moodle XML import of ddwtos could lead to intentional remote code execution
    Alta · 8.8 CVE-2018-14630 >= 3.5.0, < 3.5.2, >= 3.4.0, < 3.4.5, >= 3.2.0, < 3.3.8, < 3.1.14 3.5.2, 3.4.5, 3.3.8, 3.1.14
  61. Moodle Login CSRF vulnerability in login form
    Alta · 8.8 CVE-2018-16854 >= 3.1, < 3.1.15, >= 3.3, < 3.3.9, >= 3.4, < 3.4.6, >= 3.5, < 3.5.3 3.1.15, 3.3.9, 3.4.6, 3.5.3
  62. Moodle Improper Authentication
    Alta · 8.1 CVE-2018-1082 >= 3.3, < 3.3.5, >= 3.4, < 3.4.2 3.3.5, 3.4.2
  63. Moodle Blind SSRF Risk in /badges/mybackpack.php
    Crítica · 10.0 CVE-2019-3809 >= 3.1, < 3.1.16 3.1.16
  64. Moodle calculated question type allows remote code execution by Question authors
    Alta · 8.8 CVE-2018-1133 >= 3.1, < 3.1.12, >= 3.2, < 3.2.9, >= 3.3, < 3.3.6, >= 3.4, < 3.4.3 3.1.12, 3.2.9, 3.3.6, 3.4.3
  65. Moodle Users could elevate their role when accessing the LTI tool on a provider site
    Alta · 8.8 CVE-2019-3849 < 3.4.8, >= 3.5, < 3.5.5, >= 3.6, < 3.6.3 3.4.8, 3.5.5, 3.6.3
  66. Moodle XSS Vulnerability
    Alta · 7.3 CVE-2018-10891 >= 3.5.0, < 3.5.1, >= 3.4.0, < 3.4.4, >= 3.3.0, < 3.3.7, >= 3.2.0, < 3.2.10, >= 3.1.0, < 3.1.13 3.5.1, 3.4.4, 3.3.7, 3.2.10, 3.1.13
  67. Moodle vulnerable to SQL injection
    Alta CVE-2010-1615 >= 1.8.0, < 1.8.12, >= 1.9.0, < 1.9.8 1.8.12, 1.9.8
  68. Moodle multiple cross-site request forgery (CSRF) vulnerabilities
    Alta · 8.8 CVE-2015-5338 < 2.7.11, >= 2.8.0, < 2.8.9, >= 2.9.0, < 2.9.3 2.7.11, 2.8.9, 2.9.3
  69. Moodle uses predictable password-recovery tokens
    Alta · 7.5 CVE-2015-5267 < 2.7.10, >= 2.8.0, < 2.8.8, >= 2.9.0, < 2.9.2 2.7.10, 2.8.8, 2.9.2
  70. Moodle cross-site scripting (XSS) vulnerability esta entrada
    Media · 5.4 CVE-2015-5269 < 2.7.10, >= 2.8.0, < 2.8.8, >= 2.9.0, < 2.9.2 2.7.10, 2.8.8, 2.9.2
  71. Moodle open redirect vulnerability
    Alta · 7.4 CVE-2015-3272 >= 2.7.0, < 2.7.9, >= 2.8.0, < 2.8.7, >= 2.9.0, < 2.9.1 2.7.9, 2.8.7, 2.9.1
  72. Moodle Temporary Passwords are Brute Force-able
    Alta CVE-2014-7845 >= 2.7.0, < 2.7.3, >= 2.6.0, < 2.6.6, >= 2.5.0, < 2.5.9 2.7.3, 2.6.6, 2.5.9
  73. Moodle vulnerable to PHP object injection attacks
    Alta CVE-2014-3541 < 2.4.11, >= 2.5.0, < 2.5.7, >= 2.6.0, < 2.6.4, >= 2.7.0, < 2.7.1 2.4.11, 2.5.7, 2.6.4, 2.7.1
  74. Moodle Weak Password Recovery Mechanism for Forgotten Password
    Alta · 7.3 CVE-2016-7038 >= 2.7, < 2.7.16, >= 2.9, < 2.9.8, >= 3.0, < 3.0.6, >= 3.1, < 3.1.2 2.7.16, 2.9.8, 3.0.6, 3.1.2
  75. Moodle cross-site request forgery (CSRF) vulnerability
    Alta · 8.8 CVE-2016-2157 < 2.7.13, >= 2.8.0, < 2.8.11, >= 2.9.0, < 2.9.5, >= 3.0.0, < 3.0.3 2.7.13, 2.8.11, 2.9.5, 3.0.3
  76. Moodle Cross-site request forgery (CSRF) vulnerability
    Alta · 8.8 CVE-2016-3734 < 2.7.14, >= 2.8, < 2.8.12, >= 2.9, < 2.9.6, >= 3.0, < 3.0.4 2.7.14, 2.8.12, 2.9.6, 3.0.4
  77. Moodle backs up private files
    Alta · 7.5 CVE-2012-1156 >= 2.2, < 2.2.2, >= 2.1, < 2.1.5, >= 2.0, < 2.0.8 2.2.2, 2.1.5, 2.0.8
  78. SQL Injection in Moodle
    Alta · 8.8 CVE-2022-0983 >= 3.11.0, < 3.11.6, >= 3.10.0, < 3.10.10, < 3.9.13 3.11.6, 3.10.10, 3.9.13
  79. Moodle denial-of-service risk in the draft files area
    Alta · 7.5 CVE-2021-32476 >= 3.10, < 3.10.4, >= 3.9, < 3.9.7, >= 3.8, < 3.8.9, >= 3.5.17, < 3.5.18 3.10.4, 3.9.7, 3.8.9, 3.5.18
  80. Moodle Blind SQL injection possible via MNet authentication
    Alta · 7.2 CVE-2021-32474 >= 3.10, < 3.10.4, >= 3.9, < 3.9.7, >= 3.8, < 3.8.9, >= 3.5, < 3.5.18 3.10.4, 3.9.7, 3.8.9, 3.5.18
  81. SQL injection in Moodle
    Crítica · 9.8 CVE-2022-0332 >= 3.11, < 3.11.5 3.11.5
  82. Cross Site Request Forgery in Moodle
    Alta · 8.8 CVE-2022-0335 >= 3.11, < 3.11.5, >= 3.10, < 3.10.8, >= 3.9, < 3.9.11 3.11.5, 3.10.8, 3.9.11
  83. Moodle vulnerable to RCE via unsafe deserialization
    Crítica · 9.8 CVE-2021-3943 >= 3.11, < 3.11.4, >= 3.10, < 3.10.8, >= 3.9, < 3.9.11 3.11.4, 3.10.8, 3.9.11
  84. Privilage Escalation in moodle
    Alta · 7.5 CVE-2020-25699 >= 3.9.0, < 3.9.3, >= 3.8.0, < 3.8.6, >= 3.7.0, < 3.7.9, >= 3.5, < 3.5.15 3.9.3, 3.8.6, 3.7.9, 3.5.15
  85. Improper Access Control in moodle
    Alta · 7.5 CVE-2020-25698 >= 3.9.0, < 3.9.3, >= 3.8.0, < 3.8.6, >= 3.7.0, < 3.7.9, >= 3.5, < 3.5.15 3.9.3, 3.8.6, 3.7.9, 3.5.15

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.