Arbitrary file read risk through pdfTeX

moodle: CSRF risk in admin preset tool management of presets

Moodle: possible to set the preferred "start page" of other users

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified

Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access.

Moodle: csrf risk in feedback non-respondents report

Moodle: remote code execution via calculated question types

An issue was discovered in Moodle 3.x

A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4

Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export

Moodle: moodle: brute-force facilitation due to missing rate limiting in confirmation email service

Moodle: password brute force risk when mobile/web services enabled

Moodle: unauthenticated rest api user data exposure

Moodle: idor when deleting oauth2 linked accounts

Moodle: lfi vulnerability when restoring malformed block backups

Moodle: idor in feedback non-respondents report allows messaging arbitrary site users

Moodle: idor in badges allows deletion of arbitrary badges

Moodle: arbitrary file read risk through pdftex

moodle: HTTP authorization header is preserved between "emulated redirects"

moodle: ReCAPTCHA can be bypassed on the login page

Msa-24-0001: denial of service risk in file picker unzip functionality

Moodle: ssrf risk due to insufficient check on the curl blocked hosts

In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service

In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits

A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of…

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course

Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough

Moodle before 2.2.2 has users' private files included in course backups

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not…

A flaw was found in Moodle before versions 3.7, 3.6.4

Moodle 3.5.x before 3.5.4 allows SSRF

Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the…

lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and…

Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote…

Moodle: minor sql injection risk in external wiki method for listing pages

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed

Moodle: moodle: improper input sanitization in tex filter administration setting

Moodle: moodle: improper validation in file restore functionality leading to remote code execution

Moodle: site administration sql injection via xmldb editor

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool

An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during…

Moodle: user dos and name disclosure via idor in moodle mfa email factor revoke action

Moodle: cache poisoning via injection into storage

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load