Approved changes feed: RSS · Atom

cpe:2.3:a:moodle:moodle:3.8.0:*:*:*:*:*:*:*

part: a version: 3.8.0 update: *

VendorMoodle (1f527b56-744d-5be6-b0f4-b691bd50b8c3)
ProductMoodle (221dc9da-2dde-53d2-a358-e0cb5ac858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bitnami/moodle purl2cpe 2026-06-01 10:13:14.169000
pkg:github/moodle/moodle purl2cpe 2026-06-01 10:13:14.169001
pkg:rpm/fedora/moodle purl2cpe 2026-06-01 10:13:14.169003
pkg:rpm/opensuse/moodle purl2cpe 2026-06-01 10:13:14.169004

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1754 vulnerable 2026-06-08 05:21:02.974049 Details available
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.
Published: 2022-08-05T15:21:59.000Z
Updated: 2026-06-23T14:40:43.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1691 vulnerable 2026-06-08 05:21:02.800546 Details available
In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
Published: 2022-08-05T15:21:45.000Z
Updated: 2024-08-04T06:46:30.525Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.