Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat,_inc.:moodle:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat, Inc. (955c0640-1cfb-5fef-a58d-675724883b3d)
ProductMoodle (7e9358a7-67c8-5616-b972-9de460525a99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1082 vulnerable 2026-06-03 14:38:30.221015 Details available
A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.
Published: 2018-04-04T21:00:00.000Z
Updated: 2024-09-16T16:43:01.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1081 vulnerable 2026-06-03 14:38:30.220615 Details available
A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.
Published: 2018-04-04T21:00:00.000Z
Updated: 2024-09-16T19:55:57.284Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.