Approved changes feed: RSS · Atom
cpe:2.3:a:[unknown]:moodle:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | [Unknown] (5b07108a-8f0c-5d28-ab99-c4ff62adb460) |
|---|---|
| Product | Moodle (94b5ddc3-15ee-5fd8-b3dc-486776fec026) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-10738 |
vulnerable | 2026-06-08 05:16:35.803382 |
Details available
HIGH (7.5)
A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was possible to create a SCORM package in such a way that when added to a course, it could be interacted with via web services in order to achieve remote code execution.
Published: 2020-05-21T15:09:20.000Z
Updated: 2024-08-04T11:14:14.722Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3852 |
vulnerable | 2026-06-08 05:13:56.201022 |
Details available
MEDIUM (4.3)
A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilities
Published: 2019-03-26T17:47:06.000Z
Updated: 2024-08-04T19:19:18.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3851 |
vulnerable | 2026-06-08 05:13:56.200664 |
Details available
MEDIUM (4.3)
A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.
Published: 2019-03-26T17:46:59.000Z
Updated: 2024-08-04T19:19:18.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3850 |
vulnerable | 2026-06-08 05:13:56.200313 |
Details available
MEDIUM (4.3)
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.
Published: 2019-03-26T17:46:54.000Z
Updated: 2024-08-04T19:19:18.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3849 |
vulnerable | 2026-06-08 05:13:56.199940 |
Details available
MEDIUM (6.3)
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.
Published: 2019-03-26T17:46:47.000Z
Updated: 2024-08-04T19:19:18.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3848 |
vulnerable | 2026-06-08 05:13:56.199551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3847 |
vulnerable | 2026-06-08 05:13:56.199001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3810 |
vulnerable | 2026-06-08 05:13:56.077064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3809 |
vulnerable | 2026-06-08 05:13:56.076466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3808 |
vulnerable | 2026-06-08 05:13:56.073408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14884 |
vulnerable | 2026-06-08 05:12:56.334010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14883 |
vulnerable | 2026-06-08 05:12:56.333655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14882 |
vulnerable | 2026-06-08 05:12:56.333180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14881 |
vulnerable | 2026-06-08 05:12:56.332713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14880 |
vulnerable | 2026-06-08 05:12:56.332344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14879 |
vulnerable | 2026-06-08 05:12:56.331871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16854 |
vulnerable | 2026-06-08 05:11:05.584720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14631 |
vulnerable | 2026-06-08 05:10:53.149046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14630 |
vulnerable | 2026-06-08 05:10:53.147861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10891 |
vulnerable | 2026-06-08 05:10:37.304330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10890 |
vulnerable | 2026-06-08 05:10:37.303912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10889 |
vulnerable | 2026-06-08 05:10:37.302883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.