Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/32235?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/32235?format=api", "purl": "pkg:composer/moodle/moodle@4.1.11", "type": "composer", "namespace": "moodle", "name": "moodle", "version": "4.1.11", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "4.5.9", "latest_non_vulnerable_version": "5.1.2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31757?format=api", "vulnerability_id": "VCID-24a4-k6sm-zfey", "summary": "A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the \"view hidden user fields\" capability having access to the information.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43429", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00296", "scoring_system": "epss", "scoring_elements": "0.53291", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00296", "scoring_system": "epss", "scoring_elements": "0.53417", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00296", "scoring_system": "epss", "scoring_elements": "0.53418", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00296", "scoring_system": "epss", "scoring_elements": "0.53432", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43429" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43429", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43429" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461197", "reference_id": "discuss.php?d=461197", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:15:16Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461197" }, { "reference_url": "https://github.com/advisories/GHSA-c767-4whh-v7rw", "reference_id": "GHSA-c767-4whh-v7rw", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c767-4whh-v7rw" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304257", "reference_id": "show_bug.cgi?id=2304257", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:15:16Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304257" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43429", "GHSA-c767-4whh-v7rw" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-24a4-k6sm-zfey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40679?format=api", "vulnerability_id": "VCID-364m-hhsz-dfcs", "summary": "A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to \"magic hash\" values.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45691", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60264", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60375", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60382", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00387", "scoring_system": "epss", "scoring_elements": "0.60371", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45691" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3fc1073d304f660d2552b591c5fb92547ed01e92", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3fc1073d304f660d2552b591c5fb92547ed01e92" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461897#p1854494", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461897#p1854494" }, { "reference_url": "https://moodle.org/security", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/security" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45691", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45691" }, { "reference_url": "https://github.com/advisories/GHSA-xfv7-h2qg-rjm7", "reference_id": "GHSA-xfv7-h2qg-rjm7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xfv7-h2qg-rjm7" }, { "reference_url": "https://moodle.org/security/", "reference_id": "security", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:16Z/" } ], "url": "https://moodle.org/security/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309940", "reference_id": "show_bug.cgi?id=2309940", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:16Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309940" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372835?format=api", "purl": "pkg:composer/moodle/moodle@4.1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/372836?format=api", "purl": "pkg:composer/moodle/moodle@4.2.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/372837?format=api", "purl": "pkg:composer/moodle/moodle@4.3.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/372780?format=api", "purl": "pkg:composer/moodle/moodle@4.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3" } ], "aliases": [ "CVE-2024-45691", "GHSA-xfv7-h2qg-rjm7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-364m-hhsz-dfcs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109180?format=api", "vulnerability_id": "VCID-3dr4-hds3-ckbr", "summary": "A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67847", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.09012", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.09051", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.09063", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.09061", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67847" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471297#p1892199", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471297#p1892199" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67847", "reference_id": "CVE-2025-67847", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-24T04:55:19Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67847" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67847", "reference_id": "CVE-2025-67847", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67847" }, { "reference_url": "https://github.com/advisories/GHSA-xvmh-25jw-gmmm", "reference_id": "GHSA-xvmh-25jw-gmmm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xvmh-25jw-gmmm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67847", "GHSA-xvmh-25jw-gmmm" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3dr4-hds3-ckbr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/108958?format=api", "vulnerability_id": "VCID-3s11-9e4p-pygy", "summary": "A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67857", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.06036", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.06029", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.06051", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.06043", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67857" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6" }, { "reference_url": "https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67857", "reference_id": "CVE-2025-67857", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67857" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67857", "reference_id": "CVE-2025-67857", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67857" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471307", "reference_id": "discuss.php?d=471307", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471307" }, { "reference_url": "https://github.com/advisories/GHSA-8jrv-wx83-w3xj", "reference_id": "GHSA-8jrv-wx83-w3xj", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8jrv-wx83-w3xj" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423868", "reference_id": "show_bug.cgi?id=2423868", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423868" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67857", "GHSA-8jrv-wx83-w3xj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3s11-9e4p-pygy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101499?format=api", "vulnerability_id": "VCID-43r9-m1xz-5qge", "summary": "Description information displayed in the site administration live log \nrequired additional sanitizing to prevent a stored XSS risk.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26529", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00961", "scoring_system": "epss", "scoring_elements": "0.76993", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00961", "scoring_system": "epss", "scoring_elements": "0.77", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00961", "scoring_system": "epss", "scoring_elements": "0.7692", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00961", "scoring_system": "epss", "scoring_elements": "0.77007", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26529" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26529", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26529" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466145", "reference_id": "discuss.php?d=466145", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:38Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466145" }, { "reference_url": "https://github.com/advisories/GHSA-wr88-x8cm-7cgq", "reference_id": "GHSA-wr88-x8cm-7cgq", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wr88-x8cm-7cgq" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:38Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26529", "GHSA-wr88-x8cm-7cgq" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-43r9-m1xz-5qge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31544?format=api", "vulnerability_id": "VCID-575h-xhz7-augs", "summary": "A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43437", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01529", "scoring_system": "epss", "scoring_elements": "0.8171", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.01529", "scoring_system": "epss", "scoring_elements": "0.81771", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.01529", "scoring_system": "epss", "scoring_elements": "0.81772", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.01529", "scoring_system": "epss", "scoring_elements": "0.8178", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43437" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43437", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43437" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461207", "reference_id": "discuss.php?d=461207", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-11T14:28:15Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461207" }, { "reference_url": "https://github.com/advisories/GHSA-4hjf-6pxr-549h", "reference_id": "GHSA-4hjf-6pxr-549h", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4hjf-6pxr-549h" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304266", "reference_id": "show_bug.cgi?id=2304266", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-11T14:28:15Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304266" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43437", "GHSA-4hjf-6pxr-549h" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-575h-xhz7-augs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/108981?format=api", "vulnerability_id": "VCID-57uf-tz1x-akdt", "summary": "A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67851", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19904", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19737", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19912", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19927", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67851" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/29820c5ff4ef381c7a743091ec5c68ac82903b22", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/29820c5ff4ef381c7a743091ec5c68ac82903b22" }, { "reference_url": "https://github.com/moodle/moodle/commit/aa66bacd0783cbc33528fba9c2adca1f685a59bd", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/aa66bacd0783cbc33528fba9c2adca1f685a59bd" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc57ccc491a2a04032445a3ee92fd0d335ebd746", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc57ccc491a2a04032445a3ee92fd0d335ebd746" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67851", "reference_id": "CVE-2025-67851", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67851" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67851", "reference_id": "CVE-2025-67851", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67851" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471301", "reference_id": "discuss.php?d=471301", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471301" }, { "reference_url": "https://github.com/advisories/GHSA-qfh6-h7j6-fvjv", "reference_id": "GHSA-qfh6-h7j6-fvjv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qfh6-h7j6-fvjv" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423841", "reference_id": "show_bug.cgi?id=2423841", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423841" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67851", "GHSA-qfh6-h7j6-fvjv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-57uf-tz1x-akdt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/114321?format=api", "vulnerability_id": "VCID-67tn-z6kv-vybp", "summary": "A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-32045", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00154", "scoring_system": "epss", "scoring_elements": "0.3591", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00154", "scoring_system": "epss", "scoring_elements": "0.3609", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00154", "scoring_system": "epss", "scoring_elements": "0.36114", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00154", "scoring_system": "epss", "scoring_elements": "0.36101", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-32045" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467086", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467086" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32045", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32045" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-32045", "reference_id": "CVE-2025-32045", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:20Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-32045" }, { "reference_url": "https://github.com/advisories/GHSA-8m7c-hm88-2p97", "reference_id": "GHSA-8m7c-hm88-2p97", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8m7c-hm88-2p97" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2356835", "reference_id": "show_bug.cgi?id=2356835", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:20Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2356835" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376260?format=api", "purl": "pkg:composer/moodle/moodle@4.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/376261?format=api", "purl": "pkg:composer/moodle/moodle@4.3.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/376262?format=api", "purl": "pkg:composer/moodle/moodle@4.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/376263?format=api", "purl": "pkg:composer/moodle/moodle@4.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.3" } ], "aliases": [ "CVE-2025-32045", "GHSA-8m7c-hm88-2p97" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-67tn-z6kv-vybp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127467?format=api", "vulnerability_id": "VCID-7a6m-m4t2-5ydp", "summary": "A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3645", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26804", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26604", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26806", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.2682", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3645" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/2fd810c8981f9b10087467a3b8fce779b157200f", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2fd810c8981f9b10087467a3b8fce779b157200f" }, { "reference_url": "https://github.com/moodle/moodle/commit/a8179842b450659c288f284e06361a4fbab8742a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a8179842b450659c288f284e06361a4fbab8742a" }, { "reference_url": "https://github.com/moodle/moodle/commit/bb65effe41524d8373c1dc499c3323ac469ea558", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/bb65effe41524d8373c1dc499c3323ac469ea558" }, { "reference_url": "https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-72704&type=commits", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-72704&type=commits" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3645", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3645" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3645", "reference_id": "CVE-2025-3645", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3645" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467606", "reference_id": "discuss.php?d=467606", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467606" }, { "reference_url": "https://github.com/advisories/GHSA-pj96-xh2w-fgqx", "reference_id": "GHSA-pj96-xh2w-fgqx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pj96-xh2w-fgqx" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359761", "reference_id": "show_bug.cgi?id=2359761", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359761" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3645", "GHSA-pj96-xh2w-fgqx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7a6m-m4t2-5ydp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127040?format=api", "vulnerability_id": "VCID-7zqn-5pyf-pyg9", "summary": "A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3641", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71841", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71745", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71831", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71844", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3641" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3641", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3641" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3641", "reference_id": "CVE-2025-3641", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3641" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467602", "reference_id": "discuss.php?d=467602", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467602" }, { "reference_url": "https://github.com/advisories/GHSA-c8v6-vxhf-wcrr", "reference_id": "GHSA-c8v6-vxhf-wcrr", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c8v6-vxhf-wcrr" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359735", "reference_id": "show_bug.cgi?id=2359735", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359735" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3641", "GHSA-c8v6-vxhf-wcrr" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7zqn-5pyf-pyg9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/71012?format=api", "vulnerability_id": "VCID-82cj-8rk2-kygn", "summary": "A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-26045", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00113", "scoring_system": "epss", "scoring_elements": "0.29729", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00113", "scoring_system": "epss", "scoring_elements": "0.2953", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00113", "scoring_system": "epss", "scoring_elements": "0.29727", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00113", "scoring_system": "epss", "scoring_elements": "0.29745", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-26045" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=473314", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=473314" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2026-26045", "reference_id": "CVE-2026-26045", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2026-26045" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26045", "reference_id": "CVE-2026-26045", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26045" }, { "reference_url": "https://github.com/advisories/GHSA-ggxq-2mg9-8966", "reference_id": "GHSA-ggxq-2mg9-8966", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ggxq-2mg9-8966" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440901", "reference_id": "show_bug.cgi?id=2440901", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440901" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/39494?format=api", "purl": "pkg:composer/moodle/moodle@4.5.9", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/39493?format=api", "purl": "pkg:composer/moodle/moodle@5.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/39495?format=api", "purl": "pkg:composer/moodle/moodle@5.1.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2" } ], "aliases": [ "CVE-2026-26045", "GHSA-ggxq-2mg9-8966" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-82cj-8rk2-kygn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/126909?format=api", "vulnerability_id": "VCID-87yg-v5af-mfd4", "summary": "A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3643", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0013", "scoring_system": "epss", "scoring_elements": "0.32248", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.0013", "scoring_system": "epss", "scoring_elements": "0.32067", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0013", "scoring_system": "epss", "scoring_elements": "0.32252", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.0013", "scoring_system": "epss", "scoring_elements": "0.3227", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3643" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/ff9bbd6d9e7d6267ce85e6c9afbeb19581f2a85f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ff9bbd6d9e7d6267ce85e6c9afbeb19581f2a85f" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3643", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3643" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3643", "reference_id": "CVE-2025-3643", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3643" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467604", "reference_id": "discuss.php?d=467604", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467604" }, { "reference_url": "https://github.com/advisories/GHSA-hxgg-4qww-85ph", "reference_id": "GHSA-hxgg-4qww-85ph", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hxgg-4qww-85ph" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359742", "reference_id": "show_bug.cgi?id=2359742", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359742" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3643", "GHSA-hxgg-4qww-85ph" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-87yg-v5af-mfd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40697?format=api", "vulnerability_id": "VCID-8w1a-ft6h-g7bt", "summary": "A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45689", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31632", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31615", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31423", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45689" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461894#p1854491", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461894#p1854491" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45689", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45689" }, { "reference_url": "https://github.com/advisories/GHSA-j822-x5gg-5r56", "reference_id": "GHSA-j822-x5gg-5r56", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j822-x5gg-5r56" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309941", "reference_id": "show_bug.cgi?id=2309941", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:47Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309941" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372835?format=api", "purl": "pkg:composer/moodle/moodle@4.1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/372836?format=api", "purl": "pkg:composer/moodle/moodle@4.2.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/372837?format=api", "purl": "pkg:composer/moodle/moodle@4.3.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/372780?format=api", "purl": "pkg:composer/moodle/moodle@4.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3" } ], "aliases": [ "CVE-2024-45689", "GHSA-j822-x5gg-5r56" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8w1a-ft6h-g7bt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101646?format=api", "vulnerability_id": "VCID-8ydw-ymjw-4qhd", "summary": "Insufficient capability checks made it possible to disable badges a user does not have permission to access.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26531", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.57565", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.5757", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.57449", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.57579", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26531" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26531", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26531" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466148", "reference_id": "discuss.php?d=466148", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:42Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466148" }, { "reference_url": "https://github.com/advisories/GHSA-g88w-v4cq-qgcp", "reference_id": "GHSA-g88w-v4cq-qgcp", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g88w-v4cq-qgcp" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:42Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26531", "GHSA-g88w-v4cq-qgcp" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8ydw-ymjw-4qhd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/126890?format=api", "vulnerability_id": "VCID-95fs-szzk-c3h5", "summary": "A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3640", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00163", "scoring_system": "epss", "scoring_elements": "0.37062", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00163", "scoring_system": "epss", "scoring_elements": "0.3724", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40183", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00184", "scoring_system": "epss", "scoring_elements": "0.40194", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3640" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/64a4311266cbe9a9a942c836931bef224018b77d", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/64a4311266cbe9a9a942c836931bef224018b77d" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3640", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3640" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3640", "reference_id": "CVE-2025-3640", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3640" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467601", "reference_id": "discuss.php?d=467601", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467601" }, { "reference_url": "https://github.com/advisories/GHSA-6g5x-h5x7-q4mq", "reference_id": "GHSA-6g5x-h5x7-q4mq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6g5x-h5x7-q4mq" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359734", "reference_id": "show_bug.cgi?id=2359734", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359734" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3640", "GHSA-6g5x-h5x7-q4mq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-95fs-szzk-c3h5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56246?format=api", "vulnerability_id": "VCID-9fr5-4a3g-pbga", "summary": "A vulnerability was found in Moodle. It is possible for users with the \"send message\" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48896", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54573", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54715", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0031", "scoring_system": "epss", "scoring_elements": "0.54698", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48896" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48896", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48896" }, { "reference_url": "https://github.com/advisories/GHSA-cq5f-wv7p-5gfc", "reference_id": "GHSA-cq5f-wv7p-5gfc", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cq5f-wv7p-5gfc" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318822", "reference_id": "show_bug.cgi?id=2318822", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:57:51Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318822" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372790?format=api", "purl": "pkg:composer/moodle/moodle@4.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/372791?format=api", "purl": "pkg:composer/moodle/moodle@4.2.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/372792?format=api", "purl": "pkg:composer/moodle/moodle@4.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/372793?format=api", "purl": "pkg:composer/moodle/moodle@4.4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4" } ], "aliases": [ "CVE-2024-48896", "GHSA-cq5f-wv7p-5gfc" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9fr5-4a3g-pbga" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31296?format=api", "vulnerability_id": "VCID-bjdy-pxgn-hkcx", "summary": "A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43432", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00336", "scoring_system": "epss", "scoring_elements": "0.56827", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00336", "scoring_system": "epss", "scoring_elements": "0.56948", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00336", "scoring_system": "epss", "scoring_elements": "0.56952", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00336", "scoring_system": "epss", "scoring_elements": "0.56962", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43432" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43432", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43432" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461200", "reference_id": "discuss.php?d=461200", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:06:57Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461200" }, { "reference_url": "https://github.com/advisories/GHSA-7wmp-2xmx-g6h8", "reference_id": "GHSA-7wmp-2xmx-g6h8", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7wmp-2xmx-g6h8" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304260", "reference_id": "show_bug.cgi?id=2304260", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:06:57Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304260" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43432", "GHSA-7wmp-2xmx-g6h8" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bjdy-pxgn-hkcx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127646?format=api", "vulnerability_id": "VCID-bn3p-ccnj-3ubw", "summary": "A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3644", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.3902", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.38835", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.39006", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00175", "scoring_system": "epss", "scoring_elements": "0.3903", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3644" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3644", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3644" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3644", "reference_id": "CVE-2025-3644", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3644" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467605", "reference_id": "discuss.php?d=467605", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467605" }, { "reference_url": "https://github.com/advisories/GHSA-cpm7-mv33-jwf8", "reference_id": "GHSA-cpm7-mv33-jwf8", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cpm7-mv33-jwf8" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359745", "reference_id": "show_bug.cgi?id=2359745", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359745" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3644", "GHSA-cpm7-mv33-jwf8" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bn3p-ccnj-3ubw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40702?format=api", "vulnerability_id": "VCID-c6hn-kyf7-g3e4", "summary": "A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45690", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00393", "scoring_system": "epss", "scoring_elements": "0.60689", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00393", "scoring_system": "epss", "scoring_elements": "0.60795", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00393", "scoring_system": "epss", "scoring_elements": "0.60804", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00393", "scoring_system": "epss", "scoring_elements": "0.60794", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-45690" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/809629e5afcd5be087e65668fe6cf67f2f4f5145", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/809629e5afcd5be087e65668fe6cf67f2f4f5145" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461895#p1854492", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461895#p1854492" }, { "reference_url": "https://moodle.org/security", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/security" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45690", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45690" }, { "reference_url": "https://github.com/advisories/GHSA-fhg2-r2h9-h7q8", "reference_id": "GHSA-fhg2-r2h9-h7q8", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fhg2-r2h9-h7q8" }, { "reference_url": "https://moodle.org/security/", "reference_id": "security", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T14:15:47Z/" } ], "url": "https://moodle.org/security/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309939", "reference_id": "show_bug.cgi?id=2309939", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T14:15:47Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309939" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372835?format=api", "purl": "pkg:composer/moodle/moodle@4.1.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/372836?format=api", "purl": "pkg:composer/moodle/moodle@4.2.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/372837?format=api", "purl": "pkg:composer/moodle/moodle@4.3.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/372780?format=api", "purl": "pkg:composer/moodle/moodle@4.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3" } ], "aliases": [ "CVE-2024-45690", "GHSA-fhg2-r2h9-h7q8" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6hn-kyf7-g3e4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127571?format=api", "vulnerability_id": "VCID-c7uy-k6wn-s3f9", "summary": "A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3636", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27823", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27607", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27808", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27833", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3636" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0bd97209ac5e217dbec236c73e4f6fdcaee1c737", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0bd97209ac5e217dbec236c73e4f6fdcaee1c737" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467598", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467598" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3636", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3636" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3636", "reference_id": "CVE-2025-3636", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3636" }, { "reference_url": "https://github.com/advisories/GHSA-chmf-m33p-ph8m", "reference_id": "GHSA-chmf-m33p-ph8m", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-chmf-m33p-ph8m" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359726", "reference_id": "show_bug.cgi?id=2359726", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359726" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3636", "GHSA-chmf-m33p-ph8m" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c7uy-k6wn-s3f9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/32051?format=api", "vulnerability_id": "VCID-catf-58r7-87h5", "summary": "A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43436", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00496", "scoring_system": "epss", "scoring_elements": "0.66237", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00496", "scoring_system": "epss", "scoring_elements": "0.66342", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00496", "scoring_system": "epss", "scoring_elements": "0.66344", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00496", "scoring_system": "epss", "scoring_elements": "0.66331", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43436" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "6.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43436", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "6.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43436" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461206", "reference_id": "discuss.php?d=461206", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "6.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:37Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461206" }, { "reference_url": "https://github.com/advisories/GHSA-mx26-62xm-2p83", "reference_id": "GHSA-mx26-62xm-2p83", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mx26-62xm-2p83" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304264", "reference_id": "show_bug.cgi?id=2304264", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "6.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:37Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304264" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43436", "GHSA-mx26-62xm-2p83" ], "risk_score": 3.2, "exploitability": "0.5", "weighted_severity": "6.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-catf-58r7-87h5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109076?format=api", "vulnerability_id": "VCID-cra3-6x3q-vkap", "summary": "A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they have successfully authenticated. This occurs due to insufficient validation of redirect parameters, which could lead to phishing attacks or information disclosure.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67852", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.03548", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.0353", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.03544", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.03534", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67852" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/fa1624c8c9e3efa917f0e9d2666bb59d8be2a975", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/fa1624c8c9e3efa917f0e9d2666bb59d8be2a975" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471302", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471302" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67852", "reference_id": "CVE-2025-67852", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:44:09Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67852" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67852", "reference_id": "CVE-2025-67852", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67852" }, { "reference_url": "https://github.com/advisories/GHSA-qv78-6gpp-hm68", "reference_id": "GHSA-qv78-6gpp-hm68", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qv78-6gpp-hm68" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423844", "reference_id": "show_bug.cgi?id=2423844", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:44:09Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423844" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67852", "GHSA-qv78-6gpp-hm68" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cra3-6x3q-vkap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31684?format=api", "vulnerability_id": "VCID-e6pf-zcvz-mqfr", "summary": "The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43434", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00522", "scoring_system": "epss", "scoring_elements": "0.67339", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00522", "scoring_system": "epss", "scoring_elements": "0.67441", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00522", "scoring_system": "epss", "scoring_elements": "0.67444", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00522", "scoring_system": "epss", "scoring_elements": "0.6743", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43434" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "value": "8.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43434", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "value": "8.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43434" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461203", "reference_id": "discuss.php?d=461203", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "value": "8.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:44Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461203" }, { "reference_url": "https://github.com/advisories/GHSA-x87r-37q5-mmr8", "reference_id": "GHSA-x87r-37q5-mmr8", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x87r-37q5-mmr8" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304262", "reference_id": "show_bug.cgi?id=2304262", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "value": "8.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:44Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304262" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43434", "GHSA-x87r-37q5-mmr8" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e6pf-zcvz-mqfr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127090?format=api", "vulnerability_id": "VCID-eaej-5e2e-yfcr", "summary": "A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3647", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26804", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26604", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26806", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.2682", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3647" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/bd6ec0ac84cf0f73ab35e7e244e1f9b06929083a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/bd6ec0ac84cf0f73ab35e7e244e1f9b06929083a" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3647", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3647" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3647", "reference_id": "CVE-2025-3647", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3647" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467607", "reference_id": "discuss.php?d=467607", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467607" }, { "reference_url": "https://github.com/advisories/GHSA-34g7-pg9j-pxgp", "reference_id": "GHSA-34g7-pg9j-pxgp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-34g7-pg9j-pxgp" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359762", "reference_id": "show_bug.cgi?id=2359762", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359762" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3647", "GHSA-34g7-pg9j-pxgp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eaej-5e2e-yfcr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109344?format=api", "vulnerability_id": "VCID-ebae-b6eb-s7fr", "summary": "A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67853", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10915", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10889", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10951", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10946", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67853" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471303", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471303" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67853", "reference_id": "CVE-2025-67853", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:42Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67853" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67853", "reference_id": "CVE-2025-67853", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67853" }, { "reference_url": "https://github.com/advisories/GHSA-5cx4-w4fh-fr57", "reference_id": "GHSA-5cx4-w4fh-fr57", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5cx4-w4fh-fr57" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423847", "reference_id": "show_bug.cgi?id=2423847", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:42Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423847" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67853", "GHSA-5cx4-w4fh-fr57" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ebae-b6eb-s7fr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109335?format=api", "vulnerability_id": "VCID-fsuz-rgpw-8qd4", "summary": "A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67848", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.15558", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.15445", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.1558", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.15591", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67848" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/62f372e9d861d16df702d3c7726905fa2730e3d8", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/62f372e9d861d16df702d3c7726905fa2730e3d8" }, { "reference_url": "https://github.com/moodle/moodle/commit/c2705e2c18962fec4f21b9c34ed386be2a379663", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c2705e2c18962fec4f21b9c34ed386be2a379663" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67848", "reference_id": "CVE-2025-67848", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67848" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67848", "reference_id": "CVE-2025-67848", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67848" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471298", "reference_id": "discuss.php?d=471298", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471298" }, { "reference_url": "https://github.com/advisories/GHSA-j5jv-w5cw-j9ff", "reference_id": "GHSA-j5jv-w5cw-j9ff", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j5jv-w5cw-j9ff" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423831", "reference_id": "show_bug.cgi?id=2423831", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423831" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67848", "GHSA-j5jv-w5cw-j9ff" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fsuz-rgpw-8qd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109365?format=api", "vulnerability_id": "VCID-gapa-a9xy-w3be", "summary": "A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67850", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.0193", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01915", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01919", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.0192", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67850" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/c85f153068a717a3b28bc122e75154bac99e67e1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c85f153068a717a3b28bc122e75154bac99e67e1" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471300", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471300" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67850", "reference_id": "CVE-2025-67850", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:48Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67850" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67850", "reference_id": "CVE-2025-67850", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67850" }, { "reference_url": "https://github.com/advisories/GHSA-6mmv-f6c6-v6q8", "reference_id": "GHSA-6mmv-f6c6-v6q8", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6mmv-f6c6-v6q8" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423838", "reference_id": "show_bug.cgi?id=2423838", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:48Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423838" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67850", "GHSA-6mmv-f6c6-v6q8" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gapa-a9xy-w3be" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109156?format=api", "vulnerability_id": "VCID-hh6z-2319-83g4", "summary": "A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67855", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11824", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11765", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.1185", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11848", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67855" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0c146aa2612fb6d0544f200a018cb42da75db713", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0c146aa2612fb6d0544f200a018cb42da75db713" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471305", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471305" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67855", "reference_id": "CVE-2025-67855", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:09Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67855" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67855", "reference_id": "CVE-2025-67855", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67855" }, { "reference_url": "https://github.com/advisories/GHSA-vwhw-vp9v-q9c9", "reference_id": "GHSA-vwhw-vp9v-q9c9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vwhw-vp9v-q9c9" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423861", "reference_id": "show_bug.cgi?id=2423861", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:09Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423861" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67855", "GHSA-vwhw-vp9v-q9c9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hh6z-2319-83g4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/102162?format=api", "vulnerability_id": "VCID-j897-5zfk-rbhk", "summary": "An SQL injection risk was identified in the module list filter within course search.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26533", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00402", "scoring_system": "epss", "scoring_elements": "0.61349", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00402", "scoring_system": "epss", "scoring_elements": "0.61352", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00402", "scoring_system": "epss", "scoring_elements": "0.61244", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00402", "scoring_system": "epss", "scoring_elements": "0.61356", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26533" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1310e64699807ead6c38ee89354ac57c503c2836", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1310e64699807ead6c38ee89354ac57c503c2836" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26533", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26533" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466150", "reference_id": "discuss.php?d=466150", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:35:13Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466150" }, { "reference_url": "https://github.com/advisories/GHSA-rg56-94j7-hjx9", "reference_id": "GHSA-rg56-94j7-hjx9", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rg56-94j7-hjx9" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:35:13Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26533", "GHSA-rg56-94j7-hjx9" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j897-5zfk-rbhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56346?format=api", "vulnerability_id": "VCID-j9sx-pf51-buhe", "summary": "A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48897", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46016", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46009", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45871", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46023", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48897" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48897", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48897" }, { "reference_url": "https://github.com/advisories/GHSA-x3x9-349x-2485", "reference_id": "GHSA-x3x9-349x-2485", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x3x9-349x-2485" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318821", "reference_id": "show_bug.cgi?id=2318821", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:51:39Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318821" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372790?format=api", "purl": "pkg:composer/moodle/moodle@4.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/372791?format=api", "purl": "pkg:composer/moodle/moodle@4.2.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/372792?format=api", "purl": "pkg:composer/moodle/moodle@4.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/372793?format=api", "purl": "pkg:composer/moodle/moodle@4.4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4" } ], "aliases": [ "CVE-2024-48897", "GHSA-x3x9-349x-2485" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j9sx-pf51-buhe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31372?format=api", "vulnerability_id": "VCID-k5ku-5n57-w7e3", "summary": "A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43426", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00911", "scoring_system": "epss", "scoring_elements": "0.76276", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00911", "scoring_system": "epss", "scoring_elements": "0.76355", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00911", "scoring_system": "epss", "scoring_elements": "0.7636", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00911", "scoring_system": "epss", "scoring_elements": "0.76346", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43426" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43426", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43426" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461194", "reference_id": "discuss.php?d=461194", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:41:10Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461194" }, { "reference_url": "https://github.com/advisories/GHSA-vjmm-r9gg-425m", "reference_id": "GHSA-vjmm-r9gg-425m", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vjmm-r9gg-425m" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304254", "reference_id": "show_bug.cgi?id=2304254", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:41:10Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304254" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43426", "GHSA-vjmm-r9gg-425m" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k5ku-5n57-w7e3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/102972?format=api", "vulnerability_id": "VCID-kymv-5vap-7qf7", "summary": "An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62401", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.1307", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.12989", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.13085", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.13094", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62401" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=470390", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=470390" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-62401", "reference_id": "CVE-2025-62401", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-62401" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62401", "reference_id": "CVE-2025-62401", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62401" }, { "reference_url": "https://github.com/advisories/GHSA-w29j-8phw-ffjf", "reference_id": "GHSA-w29j-8phw-ffjf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w29j-8phw-ffjf" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404434", "reference_id": "show_bug.cgi?id=2404434", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404434" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/34734?format=api", "purl": "pkg:composer/moodle/moodle@4.1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/34731?format=api", "purl": "pkg:composer/moodle/moodle@4.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/34729?format=api", "purl": "pkg:composer/moodle/moodle@4.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/34727?format=api", "purl": "pkg:composer/moodle/moodle@5.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3" } ], "aliases": [ "CVE-2025-62401", "GHSA-w29j-8phw-ffjf" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kymv-5vap-7qf7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31474?format=api", "vulnerability_id": "VCID-meau-pbrc-5ffv", "summary": "A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82576", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82576" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43425", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.88917", "scoring_system": "epss", "scoring_elements": "0.99543", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.88917", "scoring_system": "epss", "scoring_elements": "0.99544", "published_at": "2026-06-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43425" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43425", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43425" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52350.py", "reference_id": "CVE-2024-43425", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52350.py" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461193", "reference_id": "discuss.php?d=461193", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:20Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461193" }, { "reference_url": "https://github.com/advisories/GHSA-v6f4-v8h8-3c87", "reference_id": "GHSA-v6f4-v8h8-3c87", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v6f4-v8h8-3c87" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304253", "reference_id": "show_bug.cgi?id=2304253", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:20Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304253" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43425", "GHSA-v6f4-v8h8-3c87" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-meau-pbrc-5ffv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127223?format=api", "vulnerability_id": "VCID-n5hx-mc7q-sua6", "summary": "A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3638", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46725", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46584", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46729", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46739", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3638" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3638", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3638" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3638", "reference_id": "CVE-2025-3638", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3638" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467600", "reference_id": "discuss.php?d=467600", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467600" }, { "reference_url": "https://github.com/advisories/GHSA-m8qh-hx4c-h9hr", "reference_id": "GHSA-m8qh-hx4c-h9hr", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m8qh-hx4c-h9hr" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359732", "reference_id": "show_bug.cgi?id=2359732", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "1.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359732" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3638", "GHSA-m8qh-hx4c-h9hr" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n5hx-mc7q-sua6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31792?format=api", "vulnerability_id": "VCID-ndgr-yj2x-tbcr", "summary": "To address a cache poisoning risk in Moodle, additional validation for local storage was required.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81718", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "6.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81718" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43428", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18462", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18624", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.1862", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00058", "scoring_system": "epss", "scoring_elements": "0.18642", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43428" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "6.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43428", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "6.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43428" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461196", "reference_id": "discuss.php?d=461196", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "6.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:01Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461196" }, { "reference_url": "https://github.com/advisories/GHSA-2r9m-wg35-rfvc", "reference_id": "GHSA-2r9m-wg35-rfvc", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2r9m-wg35-rfvc" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304256", "reference_id": "show_bug.cgi?id=2304256", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "6.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:01Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304256" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43428", "GHSA-2r9m-wg35-rfvc" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "6.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ndgr-yj2x-tbcr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/70854?format=api", "vulnerability_id": "VCID-nsvy-6gvu-wqe1", "summary": "A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-26047", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26334", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26136", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26337", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00094", "scoring_system": "epss", "scoring_elements": "0.26349", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-26047" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=473316", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=473316" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2026-26047", "reference_id": "CVE-2026-26047", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2026-26047" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26047", "reference_id": "CVE-2026-26047", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26047" }, { "reference_url": "https://github.com/advisories/GHSA-cg8j-5cr2-568q", "reference_id": "GHSA-cg8j-5cr2-568q", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cg8j-5cr2-568q" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440905", "reference_id": "show_bug.cgi?id=2440905", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440905" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/39494?format=api", "purl": "pkg:composer/moodle/moodle@4.5.9", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/39493?format=api", "purl": "pkg:composer/moodle/moodle@5.0.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/39495?format=api", "purl": "pkg:composer/moodle/moodle@5.1.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2" } ], "aliases": [ "CVE-2026-26047", "GHSA-cg8j-5cr2-568q" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nsvy-6gvu-wqe1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/109302?format=api", "vulnerability_id": "VCID-nw7f-9kxh-dfer", "summary": "A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to privilege escalation or unauthorized access to certain features.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67856", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.06484", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.06494", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.06515", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.06504", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67856" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471306", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471306" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67856", "reference_id": "CVE-2025-67856", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:42:42Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67856" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67856", "reference_id": "CVE-2025-67856", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67856" }, { "reference_url": "https://github.com/advisories/GHSA-hcm6-q6pc-xfhm", "reference_id": "GHSA-hcm6-q6pc-xfhm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hcm6-q6pc-xfhm" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423864", "reference_id": "show_bug.cgi?id=2423864", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:42:42Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423864" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67856", "GHSA-hcm6-q6pc-xfhm" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nw7f-9kxh-dfer" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/102718?format=api", "vulnerability_id": "VCID-pg53-92qn-67f4", "summary": "Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62400", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18982", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18823", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18987", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.19005", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62400" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=470389", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=470389" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-62400", "reference_id": "CVE-2025-62400", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-62400" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62400", "reference_id": "CVE-2025-62400", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62400" }, { "reference_url": "https://github.com/advisories/GHSA-422v-w6c5-vq42", "reference_id": "GHSA-422v-w6c5-vq42", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-422v-w6c5-vq42" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404433", "reference_id": "show_bug.cgi?id=2404433", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404433" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/34734?format=api", "purl": "pkg:composer/moodle/moodle@4.1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/34731?format=api", "purl": "pkg:composer/moodle/moodle@4.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/34729?format=api", "purl": "pkg:composer/moodle/moodle@4.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/34727?format=api", "purl": "pkg:composer/moodle/moodle@5.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3" } ], "aliases": [ "CVE-2025-62400", "GHSA-422v-w6c5-vq42" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pg53-92qn-67f4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31379?format=api", "vulnerability_id": "VCID-rdtm-s21h-87az", "summary": "A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43439", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0129", "scoring_system": "epss", "scoring_elements": "0.80072", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.0129", "scoring_system": "epss", "scoring_elements": "0.80141", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.0129", "scoring_system": "epss", "scoring_elements": "0.8015", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.0129", "scoring_system": "epss", "scoring_elements": "0.80135", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43439" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/c7d9026715a107ee16b9f9b2134ed4e6f667af99", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c7d9026715a107ee16b9f9b2134ed4e6f667af99" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43439", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43439" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461209", "reference_id": "discuss.php?d=461209", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:50:51Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461209" }, { "reference_url": "https://github.com/advisories/GHSA-hjgc-jxjc-8v9j", "reference_id": "GHSA-hjgc-jxjc-8v9j", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hjgc-jxjc-8v9j" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304268", "reference_id": "show_bug.cgi?id=2304268", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:50:51Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304268" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43439", "GHSA-hjgc-jxjc-8v9j" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rdtm-s21h-87az" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/127202?format=api", "vulnerability_id": "VCID-sja2-g5vp-tqev", "summary": "A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3642", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71841", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71745", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71831", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00667", "scoring_system": "epss", "scoring_elements": "0.71844", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3642" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3642", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3642" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3642", "reference_id": "CVE-2025-3642", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3642" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467603", "reference_id": "discuss.php?d=467603", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467603" }, { "reference_url": "https://github.com/advisories/GHSA-m367-445c-2xqr", "reference_id": "GHSA-m367-445c-2xqr", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m367-445c-2xqr" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359738", "reference_id": "show_bug.cgi?id=2359738", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359738" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3642", "GHSA-m367-445c-2xqr" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sja2-g5vp-tqev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/102951?format=api", "vulnerability_id": "VCID-tr6w-mqxr-vueh", "summary": "Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62399", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25369", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25169", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25367", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25384", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-62399" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=470388", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=470388" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-62399", "reference_id": "CVE-2025-62399", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-62399" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62399", "reference_id": "CVE-2025-62399", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62399" }, { "reference_url": "https://github.com/advisories/GHSA-m58f-9pvv-8mp2", "reference_id": "GHSA-m58f-9pvv-8mp2", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m58f-9pvv-8mp2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404432", "reference_id": "show_bug.cgi?id=2404432", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404432" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/34734?format=api", "purl": "pkg:composer/moodle/moodle@4.1.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/34731?format=api", "purl": "pkg:composer/moodle/moodle@4.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/34729?format=api", "purl": "pkg:composer/moodle/moodle@4.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/34727?format=api", "purl": "pkg:composer/moodle/moodle@5.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3" } ], "aliases": [ "CVE-2025-62399", "GHSA-m58f-9pvv-8mp2" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tr6w-mqxr-vueh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101932?format=api", "vulnerability_id": "VCID-uc4c-cw57-tyfp", "summary": "The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26528", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00706", "scoring_system": "epss", "scoring_elements": "0.72697", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00706", "scoring_system": "epss", "scoring_elements": "0.72709", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00706", "scoring_system": "epss", "scoring_elements": "0.72619", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00706", "scoring_system": "epss", "scoring_elements": "0.72711", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26528" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26528", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26528" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466144", "reference_id": "discuss.php?d=466144", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-24T20:03:52Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466144" }, { "reference_url": "https://github.com/advisories/GHSA-h697-w4ph-7pcx", "reference_id": "GHSA-h697-w4ph-7pcx", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h697-w4ph-7pcx" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-24T20:03:52Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26528", "GHSA-h697-w4ph-7pcx" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uc4c-cw57-tyfp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31588?format=api", "vulnerability_id": "VCID-ud6t-af1d-2yfh", "summary": "A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "1.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43427", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00632", "scoring_system": "epss", "scoring_elements": "0.70818", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00632", "scoring_system": "epss", "scoring_elements": "0.70908", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00632", "scoring_system": "epss", "scoring_elements": "0.70918", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00632", "scoring_system": "epss", "scoring_elements": "0.70921", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43427" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "1.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43427", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "1.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43427" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461195", "reference_id": "discuss.php?d=461195", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "1.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:02:44Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461195" }, { "reference_url": "https://github.com/advisories/GHSA-vpq5-56jj-vf2m", "reference_id": "GHSA-vpq5-56jj-vf2m", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vpq5-56jj-vf2m" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304255", "reference_id": "show_bug.cgi?id=2304255", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "1.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:02:44Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304255" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43427", "GHSA-vpq5-56jj-vf2m" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ud6t-af1d-2yfh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31653?format=api", "vulnerability_id": "VCID-vbmp-pabj-r3es", "summary": "A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43438", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00287", "scoring_system": "epss", "scoring_elements": "0.52511", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00287", "scoring_system": "epss", "scoring_elements": "0.52632", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00287", "scoring_system": "epss", "scoring_elements": "0.5265", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00287", "scoring_system": "epss", "scoring_elements": "0.52638", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43438" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43438", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43438" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461208", "reference_id": "discuss.php?d=461208", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:31Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461208" }, { "reference_url": "https://github.com/advisories/GHSA-p9cx-f595-h79h", "reference_id": "GHSA-p9cx-f595-h79h", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p9cx-f595-h79h" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304267", "reference_id": "show_bug.cgi?id=2304267", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:31Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304267" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43438", "GHSA-p9cx-f595-h79h" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vbmp-pabj-r3es" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31327?format=api", "vulnerability_id": "VCID-vfa1-gfnu-gqgb", "summary": "A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64984", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64984" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43435", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67612", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67701", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67711", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00529", "scoring_system": "epss", "scoring_elements": "0.67714", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43435" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43435", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43435" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461205", "reference_id": "discuss.php?d=461205", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:57:03Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461205" }, { "reference_url": "https://github.com/advisories/GHSA-4gq2-x5w4-7hp8", "reference_id": "GHSA-4gq2-x5w4-7hp8", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4gq2-x5w4-7hp8" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304263", "reference_id": "show_bug.cgi?id=2304263", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "2.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:57:03Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304263" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43435", "GHSA-4gq2-x5w4-7hp8" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vfa1-gfnu-gqgb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31994?format=api", "vulnerability_id": "VCID-w2zm-rxx4-xqcy", "summary": "A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43431", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00308", "scoring_system": "epss", "scoring_elements": "0.54421", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00308", "scoring_system": "epss", "scoring_elements": "0.54546", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00308", "scoring_system": "epss", "scoring_elements": "0.54562", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00308", "scoring_system": "epss", "scoring_elements": "0.54547", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43431" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43431", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43431" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461199", "reference_id": "discuss.php?d=461199", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:53Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461199" }, { "reference_url": "https://github.com/advisories/GHSA-wwjf-gwrv-wh45", "reference_id": "GHSA-wwjf-gwrv-wh45", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wwjf-gwrv-wh45" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304259", "reference_id": "show_bug.cgi?id=2304259", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:53Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304259" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43431", "GHSA-wwjf-gwrv-wh45" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w2zm-rxx4-xqcy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101757?format=api", "vulnerability_id": "VCID-w84c-jzp6-zkee", "summary": "Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26532", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.57546", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.57551", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.5743", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00345", "scoring_system": "epss", "scoring_elements": "0.5756", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26532" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26532", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26532" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466149", "reference_id": "discuss.php?d=466149", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:04Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466149" }, { "reference_url": "https://github.com/advisories/GHSA-cw24-f6fq-7j9v", "reference_id": "GHSA-cw24-f6fq-7j9v", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cw24-f6fq-7j9v" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:04Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26532", "GHSA-cw24-f6fq-7j9v" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w84c-jzp6-zkee" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101923?format=api", "vulnerability_id": "VCID-wsj3-x2v5-y7gc", "summary": "Separate Groups mode restrictions were not factored into permission \nchecks before allowing viewing or deletion of responses in Feedback \nactivities.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26526", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00381", "scoring_system": "epss", "scoring_elements": "0.60035", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00381", "scoring_system": "epss", "scoring_elements": "0.60039", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00381", "scoring_system": "epss", "scoring_elements": "0.59927", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00381", "scoring_system": "epss", "scoring_elements": "0.60047", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26526" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26526", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26526" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466142", "reference_id": "discuss.php?d=466142", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:58:41Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466142" }, { "reference_url": "https://github.com/advisories/GHSA-pxg4-xjp7-w9c5", "reference_id": "GHSA-pxg4-xjp7-w9c5", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pxg4-xjp7-w9c5" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:58:41Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26526", "GHSA-pxg4-xjp7-w9c5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wsj3-x2v5-y7gc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/126893?format=api", "vulnerability_id": "VCID-x3bb-7vq7-aqaa", "summary": "A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3635", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34764", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34581", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34758", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34783", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3635" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/dbd723f81c07423d4082d54cd1d90b1b68c44379", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dbd723f81c07423d4082d54cd1d90b1b68c44379" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=467597", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=467597" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3635", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3635" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-3635", "reference_id": "CVE-2025-3635", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:11Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-3635" }, { "reference_url": "https://github.com/advisories/GHSA-88xj-97gf-7wpq", "reference_id": "GHSA-88xj-97gf-7wpq", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-88xj-97gf-7wpq" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359709", "reference_id": "show_bug.cgi?id=2359709", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:11Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359709" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/376308?format=api", "purl": "pkg:composer/moodle/moodle@4.1.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/376309?format=api", "purl": "pkg:composer/moodle/moodle@4.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/376310?format=api", "purl": "pkg:composer/moodle/moodle@4.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/376311?format=api", "purl": "pkg:composer/moodle/moodle@4.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4" } ], "aliases": [ "CVE-2025-3635", "GHSA-88xj-97gf-7wpq" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x3bb-7vq7-aqaa" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/108885?format=api", "vulnerability_id": "VCID-x9xg-ujre-3ub9", "summary": "A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67849", "reference_id": "", "reference_type": "", "scores": [ { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00698", "published_at": "2026-06-14T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00694", "published_at": "2026-06-11T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00692", "published_at": "2026-06-12T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00693", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-67849" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/a3063dcaa44dbe66e60a37cadb33bfadfe4feb03", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a3063dcaa44dbe66e60a37cadb33bfadfe4feb03" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=471299", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=471299" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2025-67849", "reference_id": "CVE-2025-67849", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2025-67849" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67849", "reference_id": "CVE-2025-67849", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67849" }, { "reference_url": "https://github.com/advisories/GHSA-mhf6-pp52-8wqj", "reference_id": "GHSA-mhf6-pp52-8wqj", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mhf6-pp52-8wqj" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423835", "reference_id": "show_bug.cgi?id=2423835", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423835" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38121?format=api", "purl": "pkg:composer/moodle/moodle@4.1.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/38126?format=api", "purl": "pkg:composer/moodle/moodle@4.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/38122?format=api", "purl": "pkg:composer/moodle/moodle@4.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/38128?format=api", "purl": "pkg:composer/moodle/moodle@5.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/38124?format=api", "purl": "pkg:composer/moodle/moodle@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1" } ], "aliases": [ "CVE-2025-67849", "GHSA-mhf6-pp52-8wqj" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x9xg-ujre-3ub9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/31807?format=api", "vulnerability_id": "VCID-xgmq-ybaw-ckae", "summary": "A flaw was found in moodle. A local file may include risks when restoring block backups.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43440", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00334", "scoring_system": "epss", "scoring_elements": "0.56557", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00334", "scoring_system": "epss", "scoring_elements": "0.5668", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00334", "scoring_system": "epss", "scoring_elements": "0.56691", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00334", "scoring_system": "epss", "scoring_elements": "0.56676", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-43440" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43440", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43440" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=461210", "reference_id": "discuss.php?d=461210", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:23:21Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=461210" }, { "reference_url": "https://github.com/advisories/GHSA-qrqv-26gf-xgwh", "reference_id": "GHSA-qrqv-26gf-xgwh", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qrqv-26gf-xgwh" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304269", "reference_id": "show_bug.cgi?id=2304269", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:23:21Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304269" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372779?format=api", "purl": "pkg:composer/moodle/moodle@4.1.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/372778?format=api", "purl": "pkg:composer/moodle/moodle@4.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/372777?format=api", "purl": "pkg:composer/moodle/moodle@4.3.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/372776?format=api", "purl": "pkg:composer/moodle/moodle@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2" } ], "aliases": [ "CVE-2024-43440", "GHSA-qrqv-26gf-xgwh" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xgmq-ybaw-ckae" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56382?format=api", "vulnerability_id": "VCID-xju1-g3ft-gyge", "summary": "A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48901", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46016", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46009", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45871", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46023", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48901" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48901", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48901" }, { "reference_url": "https://github.com/advisories/GHSA-mg54-p2wj-5ph7", "reference_id": "GHSA-mg54-p2wj-5ph7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mg54-p2wj-5ph7" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318817", "reference_id": "show_bug.cgi?id=2318817", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:55:25Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318817" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372790?format=api", "purl": "pkg:composer/moodle/moodle@4.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/372791?format=api", "purl": "pkg:composer/moodle/moodle@4.2.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/372792?format=api", "purl": "pkg:composer/moodle/moodle@4.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/372793?format=api", "purl": "pkg:composer/moodle/moodle@4.4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4" } ], "aliases": [ "CVE-2024-48901", "GHSA-mg54-p2wj-5ph7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xju1-g3ft-gyge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/102041?format=api", "vulnerability_id": "VCID-xkgj-r2v3-k3gt", "summary": "Insufficient sanitizing in the TeX notation filter resulted in an \narbitrary file read risk on sites where pdfTeX is available (such as \nthose with TeX Live installed).", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26525", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43981", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43973", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43993", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43819", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26525" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26525", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26525" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466141", "reference_id": "discuss.php?d=466141", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:59:34Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466141" }, { "reference_url": "https://github.com/advisories/GHSA-4hmr-39vp-xfrr", "reference_id": "GHSA-4hmr-39vp-xfrr", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4hmr-39vp-xfrr" }, { "reference_url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:59:34Z/" } ], "url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26525", "GHSA-4hmr-39vp-xfrr" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xkgj-r2v3-k3gt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56384?format=api", "vulnerability_id": "VCID-zcea-b6q9-6fb9", "summary": "A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48898", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46016", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46009", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45871", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.46023", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-48898" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48898", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48898" }, { "reference_url": "https://github.com/advisories/GHSA-fjq9-452g-jg3q", "reference_id": "GHSA-fjq9-452g-jg3q", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fjq9-452g-jg3q" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318820", "reference_id": "show_bug.cgi?id=2318820", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:56:14Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318820" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/372790?format=api", "purl": "pkg:composer/moodle/moodle@4.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/372791?format=api", "purl": "pkg:composer/moodle/moodle@4.2.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/372792?format=api", "purl": "pkg:composer/moodle/moodle@4.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/372793?format=api", "purl": "pkg:composer/moodle/moodle@4.4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4" } ], "aliases": [ "CVE-2024-48898", "GHSA-fjq9-452g-jg3q" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zcea-b6q9-6fb9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/101557?format=api", "vulnerability_id": "VCID-zkc5-3squ-puep", "summary": "Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26527", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00365", "scoring_system": "epss", "scoring_elements": "0.59014", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00365", "scoring_system": "epss", "scoring_elements": "0.59015", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00365", "scoring_system": "epss", "scoring_elements": "0.58902", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00365", "scoring_system": "epss", "scoring_elements": "0.59025", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-26527" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26527", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26527" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=466143", "reference_id": "discuss.php?d=466143", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:57:30Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=466143" }, { "reference_url": "https://github.com/advisories/GHSA-5r85-6h7f-rg3r", "reference_id": "GHSA-5r85-6h7f-rg3r", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5r85-6h7f-rg3r" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941", "reference_id": "gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:57:30Z/" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/377263?format=api", "purl": "pkg:composer/moodle/moodle@4.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/377262?format=api", "purl": "pkg:composer/moodle/moodle@4.3.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/377261?format=api", "purl": "pkg:composer/moodle/moodle@4.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/377260?format=api", "purl": "pkg:composer/moodle/moodle@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-46sh-98bs-ybex" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-b959-r7ty-3fdj" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-dye9-hpdz-myc7" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-f275-awa8-53gp" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2" } ], "aliases": [ "CVE-2025-26527", "GHSA-5r85-6h7f-rg3r" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zkc5-3squ-puep" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37254?format=api", "vulnerability_id": "VCID-3ee8-byud-7kab", "summary": "A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38277", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00186", "scoring_system": "epss", "scoring_elements": "0.40429", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00186", "scoring_system": "epss", "scoring_elements": "0.4044", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00186", "scoring_system": "epss", "scoring_elements": "0.40418", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00186", "scoring_system": "epss", "scoring_elements": "0.4025", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38277" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56" }, { "reference_url": "https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57" }, { "reference_url": "https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06" }, { "reference_url": "https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38277", "reference_id": "CVE-2024-38277", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38277" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=459502", "reference_id": "discuss.php?d=459502", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=459502" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/", "reference_id": "F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/" }, { "reference_url": "https://github.com/advisories/GHSA-r82w-3phg-qvr4", "reference_id": "GHSA-r82w-3phg-qvr4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r82w-3phg-qvr4" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/", "reference_id": "GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32235?format=api", "purl": "pkg:composer/moodle/moodle@4.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/32234?format=api", "purl": "pkg:composer/moodle/moodle@4.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/32230?format=api", "purl": "pkg:composer/moodle/moodle@4.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32232?format=api", "purl": "pkg:composer/moodle/moodle@4.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-q51n-px1r-tkh4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1" } ], "aliases": [ "CVE-2024-38277", "GHSA-r82w-3phg-qvr4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ee8-byud-7kab" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37290?format=api", "vulnerability_id": "VCID-3v15-csmz-sfe9", "summary": "Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38274", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00994", "scoring_system": "epss", "scoring_elements": "0.77446", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00994", "scoring_system": "epss", "scoring_elements": "0.77437", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00994", "scoring_system": "epss", "scoring_elements": "0.77361", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00994", "scoring_system": "epss", "scoring_elements": "0.77431", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38274" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38274", "reference_id": "CVE-2024-38274", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38274" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=459499", "reference_id": "discuss.php?d=459499", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=459499" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/", "reference_id": "F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/" }, { "reference_url": "https://github.com/advisories/GHSA-p5cg-6rfr-6mx8", "reference_id": "GHSA-p5cg-6rfr-6mx8", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p5cg-6rfr-6mx8" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/", "reference_id": "GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32235?format=api", "purl": "pkg:composer/moodle/moodle@4.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/32234?format=api", "purl": "pkg:composer/moodle/moodle@4.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/32230?format=api", "purl": "pkg:composer/moodle/moodle@4.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32232?format=api", "purl": "pkg:composer/moodle/moodle@4.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-q51n-px1r-tkh4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1" } ], "aliases": [ "CVE-2024-38274", "GHSA-p5cg-6rfr-6mx8" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3v15-csmz-sfe9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37649?format=api", "vulnerability_id": "VCID-5zy2-a2hw-tuba", "summary": "Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38273", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.42167", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.42178", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.42156", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.41992", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38273" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/500cec575731fd8575569dcb5811535751dddae1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/500cec575731fd8575569dcb5811535751dddae1" }, { "reference_url": "https://github.com/moodle/moodle/commit/647b9dc06409211018c9f28581504d096ce9e3a8", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/647b9dc06409211018c9f28581504d096ce9e3a8" }, { "reference_url": "https://github.com/moodle/moodle/commit/6c0645ca29b195b5caaffc27d80f2ff715c33a48", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/6c0645ca29b195b5caaffc27d80f2ff715c33a48" }, { "reference_url": "https://github.com/moodle/moodle/commit/a10506b8d70609478fef156d489e0c7d727b6098", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a10506b8d70609478fef156d489e0c7d727b6098" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38273", "reference_id": "CVE-2024-38273", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38273" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=459498", "reference_id": "discuss.php?d=459498", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=459498" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/", "reference_id": "F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/" }, { "reference_url": "https://github.com/advisories/GHSA-x29x-qwvx-fxr2", "reference_id": "GHSA-x29x-qwvx-fxr2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x29x-qwvx-fxr2" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/", "reference_id": "GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32235?format=api", "purl": "pkg:composer/moodle/moodle@4.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/32234?format=api", "purl": "pkg:composer/moodle/moodle@4.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/32230?format=api", "purl": "pkg:composer/moodle/moodle@4.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32232?format=api", "purl": "pkg:composer/moodle/moodle@4.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-q51n-px1r-tkh4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1" } ], "aliases": [ "CVE-2024-38273", "GHSA-x29x-qwvx-fxr2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5zy2-a2hw-tuba" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37332?format=api", "vulnerability_id": "VCID-cnqj-gehg-xuhk", "summary": "Incorrect CSRF token checks resulted in multiple CSRF risks.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38276", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.50708", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.50722", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.50705", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.50571", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38276" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/093aedf79889114d004495f05969168b646b0285", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/093aedf79889114d004495f05969168b646b0285" }, { "reference_url": "https://github.com/moodle/moodle/commit/137d311fd1354c679b974633512a771e6e0559a1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/137d311fd1354c679b974633512a771e6e0559a1" }, { "reference_url": "https://github.com/moodle/moodle/commit/30fadc3686fa7490860a0bd87a29636139dfb371", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/30fadc3686fa7490860a0bd87a29636139dfb371" }, { "reference_url": "https://github.com/moodle/moodle/commit/31ced0851189a6879e4cd27c7e65d21dd9d6e87e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/31ced0851189a6879e4cd27c7e65d21dd9d6e87e" }, { "reference_url": "https://github.com/moodle/moodle/commit/57f20b6cb352893871c3afdfa8a4c09a96e16764", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/57f20b6cb352893871c3afdfa8a4c09a96e16764" }, { "reference_url": "https://github.com/moodle/moodle/commit/756090ed79aa056d0b5f58e7a1dff67f139f76b4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/756090ed79aa056d0b5f58e7a1dff67f139f76b4" }, { "reference_url": "https://github.com/moodle/moodle/commit/9af9711c0a78ebad87d49bcb369ff813bc57d0a7", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9af9711c0a78ebad87d49bcb369ff813bc57d0a7" }, { "reference_url": "https://github.com/moodle/moodle/commit/a0d8c025f732d5c18a2b9d1a8e5cbee35dce86f4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a0d8c025f732d5c18a2b9d1a8e5cbee35dce86f4" }, { "reference_url": "https://github.com/moodle/moodle/commit/c18b59808cefe7b54c85dce6bf2cc71601080667", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c18b59808cefe7b54c85dce6bf2cc71601080667" }, { "reference_url": "https://github.com/moodle/moodle/commit/c1aacb3e2884ea4dcc221c5ef2e449ce345f78ae", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c1aacb3e2884ea4dcc221c5ef2e449ce345f78ae" }, { "reference_url": "https://github.com/moodle/moodle/commit/c5b1604e8136db6d72057dd8052955058489206c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c5b1604e8136db6d72057dd8052955058489206c" }, { "reference_url": "https://github.com/moodle/moodle/commit/da8e8cee6ffaf7c184eded97e1016f20c9de0561", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/da8e8cee6ffaf7c184eded97e1016f20c9de0561" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc84fcfab06a4a0fe37797b8422e9fe3a1031c3e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc84fcfab06a4a0fe37797b8422e9fe3a1031c3e" }, { "reference_url": "https://github.com/moodle/moodle/commit/e1dab5f38166a2ff62983178f7bf8f0ed3a61090", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e1dab5f38166a2ff62983178f7bf8f0ed3a61090" }, { "reference_url": "https://github.com/moodle/moodle/commit/e23f603c41055ab92f9b430cf0e7a54b4e120f95", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e23f603c41055ab92f9b430cf0e7a54b4e120f95" }, { "reference_url": "https://github.com/moodle/moodle/commit/f2807dee5bc777d9c58b7a70cba6e4c21ee02ea1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f2807dee5bc777d9c58b7a70cba6e4c21ee02ea1" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38276", "reference_id": "CVE-2024-38276", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38276" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=459501", "reference_id": "discuss.php?d=459501", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=459501" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/", "reference_id": "F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/" }, { "reference_url": "https://github.com/advisories/GHSA-356g-7x36-7m34", "reference_id": "GHSA-356g-7x36-7m34", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-356g-7x36-7m34" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/", "reference_id": "GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32235?format=api", "purl": "pkg:composer/moodle/moodle@4.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/32234?format=api", "purl": "pkg:composer/moodle/moodle@4.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/32230?format=api", "purl": "pkg:composer/moodle/moodle@4.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32232?format=api", "purl": "pkg:composer/moodle/moodle@4.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-q51n-px1r-tkh4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1" } ], "aliases": [ "CVE-2024-38276", "GHSA-356g-7x36-7m34" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cnqj-gehg-xuhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37596?format=api", "vulnerability_id": "VCID-nw5a-bxbt-vbg5", "summary": "The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38275", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00759", "scoring_system": "epss", "scoring_elements": "0.73854", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.00759", "scoring_system": "epss", "scoring_elements": "0.73853", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.00759", "scoring_system": "epss", "scoring_elements": "0.73764", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.00759", "scoring_system": "epss", "scoring_elements": "0.73839", "published_at": "2026-06-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-38275" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0df3c5837a592e6663c4d531ff6a1f776bc2f785", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0df3c5837a592e6663c4d531ff6a1f776bc2f785" }, { "reference_url": "https://github.com/moodle/moodle/commit/3e38c84315a7991ce5ef5f241f5e873b5ca24f01", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3e38c84315a7991ce5ef5f241f5e873b5ca24f01" }, { "reference_url": "https://github.com/moodle/moodle/commit/836b2c23a210317d130017d77bb64e3b510869a9", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/836b2c23a210317d130017d77bb64e3b510869a9" }, { "reference_url": "https://github.com/moodle/moodle/commit/f7988538b2208c55f2c40ce4f0815901dc88049b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f7988538b2208c55f2c40ce4f0815901dc88049b" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38275", "reference_id": "CVE-2024-38275", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38275" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=459500", "reference_id": "discuss.php?d=459500", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-02T13:36:09Z/" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=459500" }, { "reference_url": "https://github.com/advisories/GHSA-p2cj-86v4-7782", "reference_id": "GHSA-p2cj-86v4-7782", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p2cj-86v4-7782" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/32235?format=api", "purl": "pkg:composer/moodle/moodle@4.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/32234?format=api", "purl": "pkg:composer/moodle/moodle@4.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/32230?format=api", "purl": "pkg:composer/moodle/moodle@4.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1svf-1dtz-3qey" }, { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/32232?format=api", "purl": "pkg:composer/moodle/moodle@4.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24a4-k6sm-zfey" }, { "vulnerability": "VCID-2ua4-y1mx-t7f4" }, { "vulnerability": "VCID-364m-hhsz-dfcs" }, { "vulnerability": "VCID-3dr4-hds3-ckbr" }, { "vulnerability": "VCID-3s11-9e4p-pygy" }, { "vulnerability": "VCID-43r9-m1xz-5qge" }, { "vulnerability": "VCID-575h-xhz7-augs" }, { "vulnerability": "VCID-57uf-tz1x-akdt" }, { "vulnerability": "VCID-67tn-z6kv-vybp" }, { "vulnerability": "VCID-7a6m-m4t2-5ydp" }, { "vulnerability": "VCID-7zqn-5pyf-pyg9" }, { "vulnerability": "VCID-82cj-8rk2-kygn" }, { "vulnerability": "VCID-87yg-v5af-mfd4" }, { "vulnerability": "VCID-8w1a-ft6h-g7bt" }, { "vulnerability": "VCID-8ydw-ymjw-4qhd" }, { "vulnerability": "VCID-95fs-szzk-c3h5" }, { "vulnerability": "VCID-9fr5-4a3g-pbga" }, { "vulnerability": "VCID-bjdy-pxgn-hkcx" }, { "vulnerability": "VCID-bn3p-ccnj-3ubw" }, { "vulnerability": "VCID-c6hn-kyf7-g3e4" }, { "vulnerability": "VCID-c7uy-k6wn-s3f9" }, { "vulnerability": "VCID-catf-58r7-87h5" }, { "vulnerability": "VCID-cra3-6x3q-vkap" }, { "vulnerability": "VCID-e6pf-zcvz-mqfr" }, { "vulnerability": "VCID-eaej-5e2e-yfcr" }, { "vulnerability": "VCID-ebae-b6eb-s7fr" }, { "vulnerability": "VCID-fsuz-rgpw-8qd4" }, { "vulnerability": "VCID-gapa-a9xy-w3be" }, { "vulnerability": "VCID-hh6z-2319-83g4" }, { "vulnerability": "VCID-j897-5zfk-rbhk" }, { "vulnerability": "VCID-j9sx-pf51-buhe" }, { "vulnerability": "VCID-jn27-7e3d-1uc6" }, { "vulnerability": "VCID-k5ku-5n57-w7e3" }, { "vulnerability": "VCID-kymv-5vap-7qf7" }, { "vulnerability": "VCID-meau-pbrc-5ffv" }, { "vulnerability": "VCID-n5hx-mc7q-sua6" }, { "vulnerability": "VCID-ndgr-yj2x-tbcr" }, { "vulnerability": "VCID-ndsq-chgj-4kcq" }, { "vulnerability": "VCID-nsvy-6gvu-wqe1" }, { "vulnerability": "VCID-nw7f-9kxh-dfer" }, { "vulnerability": "VCID-p6d8-jya8-vfe2" }, { "vulnerability": "VCID-pg53-92qn-67f4" }, { "vulnerability": "VCID-pv24-2amy-4yb9" }, { "vulnerability": "VCID-q51n-px1r-tkh4" }, { "vulnerability": "VCID-rdtm-s21h-87az" }, { "vulnerability": "VCID-s97q-jcmh-ukdh" }, { "vulnerability": "VCID-sja2-g5vp-tqev" }, { "vulnerability": "VCID-tr6w-mqxr-vueh" }, { "vulnerability": "VCID-uc4c-cw57-tyfp" }, { "vulnerability": "VCID-ud6t-af1d-2yfh" }, { "vulnerability": "VCID-vbmp-pabj-r3es" }, { "vulnerability": "VCID-vfa1-gfnu-gqgb" }, { "vulnerability": "VCID-w2zm-rxx4-xqcy" }, { "vulnerability": "VCID-w84c-jzp6-zkee" }, { "vulnerability": "VCID-wr3n-bk11-a3bj" }, { "vulnerability": "VCID-wsj3-x2v5-y7gc" }, { "vulnerability": "VCID-x3bb-7vq7-aqaa" }, { "vulnerability": "VCID-x9xg-ujre-3ub9" }, { "vulnerability": "VCID-xgmq-ybaw-ckae" }, { "vulnerability": "VCID-xju1-g3ft-gyge" }, { "vulnerability": "VCID-xkgj-r2v3-k3gt" }, { "vulnerability": "VCID-zcea-b6q9-6fb9" }, { "vulnerability": "VCID-zkc5-3squ-puep" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1" } ], "aliases": [ "CVE-2024-38275", "GHSA-p2cj-86v4-7782" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nw5a-bxbt-vbg5" } ], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11" }