Moodle 4.0.0 Release Candidate 4
Approved changes feed: RSS · Atom
cpe:2.3:a:moodle:moodle:4.0.0:rc4:*:*:*:*:*:*
part: a version: 4.0.0 update: rc4
| Vendor | Moodle (1f527b56-744d-5be6-b0f4-b691bd50b8c3) |
|---|---|
| Product | Moodle (221dc9da-2dde-53d2-a358-e0cb5ac858f7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/bitnami/moodle |
purl2cpe | 2026-06-01 10:13:14.230621 |
pkg:github/moodle/moodle |
purl2cpe | 2026-06-01 10:13:14.230622 |
pkg:rpm/fedora/moodle |
purl2cpe | 2026-06-01 10:13:14.230624 |
pkg:rpm/opensuse/moodle |
purl2cpe | 2026-06-01 10:13:14.230625 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35653 |
vulnerable | 2026-06-08 05:46:05.083146 |
Details available
A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.
Published: 2022-07-25T15:33:11.000Z
Updated: 2024-08-03T09:36:44.402Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35651 |
vulnerable | 2026-06-08 05:46:05.077503 |
Details available
A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks.
Published: 2022-07-25T15:30:22.000Z
Updated: 2024-08-03T09:36:44.408Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.