Approved changes feed: RSS · Atom

cpe:2.3:a:moodle:moodle:3.10.0:*:*:*:*:*:*:*

part: a version: 3.10.0 update: *

VendorMoodle (1f527b56-744d-5be6-b0f4-b691bd50b8c3)
ProductMoodle (221dc9da-2dde-53d2-a358-e0cb5ac858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20187 vulnerable 2026-06-08 05:29:08.663338 Details available
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
Published: 2021-01-28T18:30:03.000Z
Updated: 2024-08-03T17:30:07.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20185 vulnerable 2026-06-08 05:29:08.662574 Details available
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.
Published: 2021-01-28T19:01:04.000Z
Updated: 2024-08-03T17:30:07.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.