Skip to content
OpenAdvisories

Package · Ubuntu

moodle

323 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-36394 Public exploit

    Moodle Session Fixation vulnerability

    In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2021-36393 Public exploit EPSS 52%

    Moodle SQL Injection vulnerability

    In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-35649 Public exploit

    Moodle PostScript Code Injection

    The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-30600 Public exploit

    Incorrect Calculation in moodle

    A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-0332 Public exploit EPSS 32%

    SQL injection in Moodle

    A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

    moodle/moodle moodle Web / CMS Ubuntu Packagist