Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/62041?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/62041?format=api", "purl": "pkg:composer/moodle/moodle@2.5.0", "type": "composer", "namespace": "moodle", "name": "moodle", "version": "2.5.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.5.18", "latest_non_vulnerable_version": "5.1.2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43548?format=api", "vulnerability_id": "VCID-1ehh-qz6c-ykhp", "summary": "Moodle allows attackers to obtain username and course information\nMoodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45760", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45760" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3546", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51971", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51911", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3546" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/2ca9e09dab3ff374e1026780b23c63751f4ee312", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2ca9e09dab3ff374e1026780b23c63751f4ee312" }, { "reference_url": "https://github.com/moodle/moodle/commit/74556525de9617c593c3e08269d6d541c6576c90", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/74556525de9617c593c3e08269d6d541c6576c90" }, { "reference_url": "https://github.com/moodle/moodle/commit/8f7d596058a18c60b795b4677b59cf074c56de39", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8f7d596058a18c60b795b4677b59cf074c56de39" }, { "reference_url": "https://github.com/moodle/moodle/commit/9dbf62d23017a91fcbf63bba7f2eb4835f77b8c9", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9dbf62d23017a91fcbf63bba7f2eb4835f77b8c9" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc97145785b9ae192168659c65309bca61a58151", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc97145785b9ae192168659c65309bca61a58151" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264267", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264267" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3546", "reference_id": "CVE-2014-3546", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3546" }, { "reference_url": "https://github.com/advisories/GHSA-4c5g-w3gf-rf4f", "reference_id": "GHSA-4c5g-w3gf-rf4f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4c5g-w3gf-rf4f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3546", "GHSA-4c5g-w3gf-rf4f" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1ehh-qz6c-ykhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43555?format=api", "vulnerability_id": "VCID-1whm-dsv7-t7gm", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCross-site scripting (XSS) vulnerability in the quiz_question_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to inject arbitrary web script or HTML via a quiz question.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43690", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43690" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-2571", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.43358", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.43285", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-2571" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/217d839ded7026ed1b1280e1c296bc80a4036023", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/217d839ded7026ed1b1280e1c296bc80a4036023" }, { "reference_url": "https://github.com/moodle/moodle/commit/5da73345fdd46cef912b229b2cfae2a26e36efd8", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5da73345fdd46cef912b229b2cfae2a26e36efd8" }, { "reference_url": "https://github.com/moodle/moodle/commit/7051f3a8828665f4fab37c8db91322fec85a64db", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7051f3a8828665f4fab37c8db91322fec85a64db" }, { "reference_url": "https://github.com/moodle/moodle/commit/fd4b7f57399bed85db0d4066ba12c2633ce87ba3", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/fd4b7f57399bed85db0d4066ba12c2633ce87ba3" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256416", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256416" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2571", "reference_id": "CVE-2014-2571", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2571" }, { "reference_url": "https://github.com/advisories/GHSA-75c6-xqwr-v2r9", "reference_id": "GHSA-75c6-xqwr-v2r9", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-75c6-xqwr-v2r9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-2571", "GHSA-75c6-xqwr-v2r9" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1whm-dsv7-t7gm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51695?format=api", "vulnerability_id": "VCID-2s6b-tp6p-gue1", "summary": "Cross-Site Request Forgery (CSRF)\nA sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10186", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00371", "scoring_system": "epss", "scoring_elements": "0.59247", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00371", "scoring_system": "epss", "scoring_elements": "0.59199", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10186" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10186", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10186" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/ea1ac3c7efbddbdb210ea4c75e7156c7d7ee914b", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ea1ac3c7efbddbdb210ea4c75e7156c7d7ee914b" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388567#p1566329", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388567#p1566329" }, { "reference_url": "https://web.archive.org/web/20210125055044/https://www.securityfocus.com/bid/109175", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210125055044/https://www.securityfocus.com/bid/109175" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10186", "reference_id": "CVE-2019-10186", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10186" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10186", "GHSA-wv9c-pfpm-4wc5" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2s6b-tp6p-gue1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38122?format=api", "vulnerability_id": "VCID-37pj-u3gh-n7fd", "summary": "Insertion of Sensitive Information into Log File\nMoodle does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2190", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00437", "scoring_system": "epss", "scoring_elements": "0.63437", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00437", "scoring_system": "epss", "scoring_elements": "0.63393", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2190" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1688564a6eee6000013f6e185f704049283ae375", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1688564a6eee6000013f6e185f704049283ae375" }, { "reference_url": "https://github.com/moodle/moodle/commit/190757854d9ce3b3ce3100dc76de54277f3bdd14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/190757854d9ce3b3ce3100dc76de54277f3bdd14" }, { "reference_url": "https://github.com/moodle/moodle/commit/314d105c169c67e3ce750f76b21d99983d4a9ff5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/314d105c169c67e3ce750f76b21d99983d4a9ff5" }, { "reference_url": "https://github.com/moodle/moodle/commit/4d6f159f681882496e05ddacf2561929d2d23f0e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4d6f159f681882496e05ddacf2561929d2d23f0e" }, { "reference_url": "https://github.com/moodle/moodle/commit/9f91c23536a31ba2dc91b0ba2ae726b1757a20cb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9f91c23536a31ba2dc91b0ba2ae726b1757a20cb" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330181", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330181" }, { "reference_url": "https://web.archive.org/web/20210801130148/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210801130148/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2190", "reference_id": "CVE-2016-2190", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2190" }, { "reference_url": "https://github.com/advisories/GHSA-r9pc-g29w-f86j", "reference_id": "GHSA-r9pc-g29w-f86j", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r9pc-g29w-f86j" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2190", "GHSA-r9pc-g29w-f86j" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-37pj-u3gh-n7fd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43631?format=api", "vulnerability_id": "VCID-4v57-bu85-syhr", "summary": "Moodle does not properly restrict file access\nThe My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43877", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43877" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/05/19/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/05/19/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0216", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51971", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51911", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0216" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/40ad22fdd0d9ed569b2ad0ff6ad02814bfa014b8", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/40ad22fdd0d9ed569b2ad0ff6ad02814bfa014b8" }, { "reference_url": "https://github.com/moodle/moodle/commit/568514ee7f7e994f61e7a44356fe89d0dd18c157", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/568514ee7f7e994f61e7a44356fe89d0dd18c157" }, { "reference_url": "https://github.com/moodle/moodle/commit/7b9acc77efe06f7be7070032b05c3159e0a6d415", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7b9acc77efe06f7be7070032b05c3159e0a6d415" }, { "reference_url": "https://github.com/moodle/moodle/commit/b04bf988ef47f8fa65dd08ce936ecb774d5d76bd", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b04bf988ef47f8fa65dd08ce936ecb774d5d76bd" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=260364", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=260364" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0216", "reference_id": "CVE-2014-0216", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0216" }, { "reference_url": "https://github.com/advisories/GHSA-8rc7-4qfv-4484", "reference_id": "GHSA-8rc7-4qfv-4484", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8rc7-4qfv-4484" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62207?format=api", "purl": "pkg:composer/moodle/moodle@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62208?format=api", "purl": "pkg:composer/moodle/moodle@2.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.3" } ], "aliases": [ "CVE-2014-0216", "GHSA-8rc7-4qfv-4484" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4v57-bu85-syhr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43412?format=api", "vulnerability_id": "VCID-4xqt-yugc-qufr", "summary": "Moodle's time-validation implementation allows bypassing intended restrictions\nThe time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete_guest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote authenticated users to bypass intended restrictions on starting a Feedback activity by choosing an unavailable time.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43656", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43656" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0127", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00171", "scoring_system": "epss", "scoring_elements": "0.3819", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00171", "scoring_system": "epss", "scoring_elements": "0.38101", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0127" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1298acc7075614d8f24befe7e50edbd695498d66", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1298acc7075614d8f24befe7e50edbd695498d66" }, { "reference_url": "https://github.com/moodle/moodle/commit/71037bf26c1e66c628f952b777a9b068775f7b24", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/71037bf26c1e66c628f952b777a9b068775f7b24" }, { "reference_url": "https://github.com/moodle/moodle/commit/7b839b0ec1d3d7fdfe7f76066c49829936a2390e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7b839b0ec1d3d7fdfe7f76066c49829936a2390e" }, { "reference_url": "https://github.com/moodle/moodle/commit/aea324963dfee857315d147bf0c17659bb43991e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/aea324963dfee857315d147bf0c17659bb43991e" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256417", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256417" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0127", "reference_id": "CVE-2014-0127", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0127" }, { "reference_url": "https://github.com/advisories/GHSA-6p3g-hw27-qh44", "reference_id": "GHSA-6p3g-hw27-qh44", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6p3g-hw27-qh44" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0127", "GHSA-6p3g-hw27-qh44" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4xqt-yugc-qufr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43514?format=api", "vulnerability_id": "VCID-5ru2-1n1f-afa4", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.", "references": [ { "reference_url": "http://flash.flowplayer.org/documentation/version-history.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://flash.flowplayer.org/documentation/version-history.html" }, { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-7341", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00258", "scoring_system": "epss", "scoring_elements": "0.49502", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00258", "scoring_system": "epss", "scoring_elements": "0.49439", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-7341" }, { "reference_url": "https://github.com/flowplayer/flash/issues/121", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/flowplayer/flash/issues/121" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/98d135fea3006334093efa822205d4b2c3fd8ff9", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/98d135fea3006334093efa822205d4b2c3fd8ff9" }, { "reference_url": "https://github.com/moodle/moodle/commit/9f2967e301d123d11625f3b6948e1ee538086791", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9f2967e301d123d11625f3b6948e1ee538086791" }, { "reference_url": "https://github.com/moodle/moodle/commit/c3cd5e1db9de4f1a634492d99990534e30518066", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c3cd5e1db9de4f1a634492d99990534e30518066" }, { "reference_url": "https://github.com/moodle/moodle/commit/d65634044ebaa738f55bdec521beb42844d6916a", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d65634044ebaa738f55bdec521beb42844d6916a" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256420", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256420" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2015-007", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2015-007" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7341", "reference_id": "CVE-2013-7341", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7341" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-7341.yaml", "reference_id": "CVE-2013-7341.YAML", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-7341.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-j6c3-3c4w-qv8p", "reference_id": "GHSA-j6c3-3c4w-qv8p", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j6c3-3c4w-qv8p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2013-7341", "GHSA-j6c3-3c4w-qv8p" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5ru2-1n1f-afa4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38453?format=api", "vulnerability_id": "VCID-65y9-9ur2-pugc", "summary": "Improper Input Validation\nThere is incorrect sanitization of attributes in forums.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-2576", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00289", "scoring_system": "epss", "scoring_elements": "0.5258", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00289", "scoring_system": "epss", "scoring_elements": "0.52639", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-2576" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=345912", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=345912" }, { "reference_url": "http://www.securityfocus.com/bid/95649", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/95649" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2576", "reference_id": "CVE-2017-2576", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2576" }, { "reference_url": "https://github.com/advisories/GHSA-cjrf-xg77-chpw", "reference_id": "GHSA-cjrf-xg77-chpw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cjrf-xg77-chpw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53208?format=api", "purl": "pkg:composer/moodle/moodle@2.7.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/206034?format=api", "purl": "pkg:composer/moodle/moodle@2.9.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/206037?format=api", "purl": "pkg:composer/moodle/moodle@3.0.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/53209?format=api", "purl": "pkg:composer/moodle/moodle@3.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/53201?format=api", "purl": "pkg:composer/moodle/moodle@3.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/53202?format=api", "purl": "pkg:composer/moodle/moodle@3.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2qjr-wjh1-8fh6" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nc2j-pay7-ryab" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.1" } ], "aliases": [ "CVE-2017-2576", "GHSA-cjrf-xg77-chpw" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-65y9-9ur2-pugc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43640?format=api", "vulnerability_id": "VCID-6v43-drd7-ufd7", "summary": "Moodle allows bypass of intended access restrictions\nmod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by remaining in a chat session after an intra-session capability removal by an administrator.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0122", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00171", "scoring_system": "epss", "scoring_elements": "0.3819", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00171", "scoring_system": "epss", "scoring_elements": "0.38101", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0122" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3d7810ab3d67a423a760ba89ae75de81d940b236", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3d7810ab3d67a423a760ba89ae75de81d940b236" }, { "reference_url": "https://github.com/moodle/moodle/commit/4d4867503c2467cb04660d9cb314d22f56004054", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4d4867503c2467cb04660d9cb314d22f56004054" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c45ea0c6bf2fdf4dddfaef9fc5ff12e6b426a3f", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c45ea0c6bf2fdf4dddfaef9fc5ff12e6b426a3f" }, { "reference_url": "https://github.com/moodle/moodle/commit/7748e17207b1a28118d9dc622878da22f956d3fe", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7748e17207b1a28118d9dc622878da22f956d3fe" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256418", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256418" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0122", "reference_id": "CVE-2014-0122", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0122" }, { "reference_url": "https://github.com/advisories/GHSA-f9m9-494r-w36p", "reference_id": "GHSA-f9m9-494r-w36p", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f9m9-494r-w36p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0122", "GHSA-f9m9-494r-w36p" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6v43-drd7-ufd7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43663?format=api", "vulnerability_id": "VCID-7g7m-bu5q-gbcx", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCross-site scripting (XSS) vulnerability in the URL downloader repository in repository/url/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45332", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45332" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/05/19/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/05/19/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0218", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00256", "scoring_system": "epss", "scoring_elements": "0.49209", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00256", "scoring_system": "epss", "scoring_elements": "0.49148", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0218" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c276a4c324b5137064496d6dd68e71476015fcd", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c276a4c324b5137064496d6dd68e71476015fcd" }, { "reference_url": "https://github.com/moodle/moodle/commit/729783c4ba971413198f30784b48e3f2107a8da6", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/729783c4ba971413198f30784b48e3f2107a8da6" }, { "reference_url": "https://github.com/moodle/moodle/commit/b8a6f7d19d623bcf992d8ecda94324100bc50e9d", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b8a6f7d19d623bcf992d8ecda94324100bc50e9d" }, { "reference_url": "https://github.com/moodle/moodle/commit/c5e8a036c509197bb2927f47c0579992be479f35", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c5e8a036c509197bb2927f47c0579992be479f35" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=260366", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=260366" }, { "reference_url": "https://web.archive.org/web/20141224120458/http://www.securityfocus.com/bid/67479", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20141224120458/http://www.securityfocus.com/bid/67479" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0218", "reference_id": "CVE-2014-0218", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0218" }, { "reference_url": "https://github.com/advisories/GHSA-ch68-5r37-p7c3", "reference_id": "GHSA-ch68-5r37-p7c3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ch68-5r37-p7c3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62207?format=api", "purl": "pkg:composer/moodle/moodle@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62208?format=api", "purl": "pkg:composer/moodle/moodle@2.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.3" } ], "aliases": [ "CVE-2014-0218", "GHSA-ch68-5r37-p7c3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7g7m-bu5q-gbcx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39173?format=api", "vulnerability_id": "VCID-83kb-4mk9-t7ge", "summary": "Information Exposure\nStudents can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15110", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00237", "scoring_system": "epss", "scoring_elements": "0.46726", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00237", "scoring_system": "epss", "scoring_elements": "0.46792", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15110" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=361784", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=361784" }, { "reference_url": "http://www.securityfocus.com/bid/101909", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/101909" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15110", "reference_id": "CVE-2017-15110", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15110" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/54108?format=api", "purl": "pkg:composer/moodle/moodle@3.1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/54109?format=api", "purl": "pkg:composer/moodle/moodle@3.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nc2j-pay7-ryab" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/54110?format=api", "purl": "pkg:composer/moodle/moodle@3.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nc2j-pay7-ryab" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.3" } ], "aliases": [ "CVE-2017-15110", "GHSA-rjh8-w8jg-xwq5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-83kb-4mk9-t7ge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43735?format=api", "vulnerability_id": "VCID-88pw-zwqn-cqfd", "summary": "Moodle places a session key in a URL\nrepository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29409", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29409" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0125", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42174", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.421", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0125" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/4bc5dd32178cbaa62c466f74bf6d0ebafb697818", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4bc5dd32178cbaa62c466f74bf6d0ebafb697818" }, { "reference_url": "https://github.com/moodle/moodle/commit/a71a6de914bec01df4268d0547c7a52917c4192f", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a71a6de914bec01df4268d0547c7a52917c4192f" }, { "reference_url": "https://github.com/moodle/moodle/commit/ee8f17db890d7fa1bfc2cfd49ff8d21b41d29331", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ee8f17db890d7fa1bfc2cfd49ff8d21b41d29331" }, { "reference_url": "https://github.com/moodle/moodle/commit/f4f0aa27d43527c15070d00bc96be879876ccc38", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f4f0aa27d43527c15070d00bc96be879876ccc38" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256422", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256422" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0125", "reference_id": "CVE-2014-0125", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0125" }, { "reference_url": "https://github.com/advisories/GHSA-j465-7mp6-3xg3", "reference_id": "GHSA-j465-7mp6-3xg3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j465-7mp6-3xg3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0125", "GHSA-j465-7mp6-3xg3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-88pw-zwqn-cqfd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52271?format=api", "vulnerability_id": "VCID-a6pb-47tu-afcg", "summary": "Information Exposure\nMoodle is vulnerable to information exposure of service tokens for users enrolled in the same course.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1692", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00159", "scoring_system": "epss", "scoring_elements": "0.36547", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00159", "scoring_system": "epss", "scoring_elements": "0.36641", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1692" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1692", "reference_id": "CVE-2020-1692", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1692" }, { "reference_url": "https://github.com/advisories/GHSA-9328-7pcw-vw69", "reference_id": "GHSA-9328-7pcw-vw69", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9328-7pcw-vw69" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76646?format=api", "purl": "pkg:composer/moodle/moodle@3.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.2" } ], "aliases": [ "CVE-2020-1692", "GHSA-9328-7pcw-vw69" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a6pb-47tu-afcg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39322?format=api", "vulnerability_id": "VCID-ajkr-fxa1-mkhk", "summary": "Cross-site Scripting\nMoodle is vulnerable to XSS via a calendar event name.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1045", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00237", "scoring_system": "epss", "scoring_elements": "0.46987", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00237", "scoring_system": "epss", "scoring_elements": "0.47053", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1045" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=364384", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=364384" }, { "reference_url": "https://web.archive.org/web/20210124134120/http://www.securityfocus.com/bid/102755", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210124134120/http://www.securityfocus.com/bid/102755" }, { "reference_url": "http://www.securityfocus.com/bid/102755", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/102755" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1045", "reference_id": "CVE-2018-1045", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1045" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54885?format=api", "purl": "pkg:composer/moodle/moodle@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/54886?format=api", "purl": "pkg:composer/moodle/moodle@3.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/moodle/moodle@3.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4" } ], "aliases": [ "CVE-2018-1045", "GHSA-595j-wpfg-23w4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ajkr-fxa1-mkhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38123?format=api", "vulnerability_id": "VCID-an53-nu91-k3d7", "summary": "Cross-site Scripting\nMultiple cross-site scripting (XSS) vulnerabilities in `auth/db/auth.php` in Moodle allow remote attackers to inject arbitrary web script or HTML via an external DB profile field.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2152", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.45061", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.44992", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2152" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3b214760fb51ae2b0c85bbb2b272b9bc7c164657", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3b214760fb51ae2b0c85bbb2b272b9bc7c164657" }, { "reference_url": "https://github.com/moodle/moodle/commit/4db8407d3eaba17a8d3f81957b8e93e9f2554055", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4db8407d3eaba17a8d3f81957b8e93e9f2554055" }, { "reference_url": "https://github.com/moodle/moodle/commit/4ee7394c8bfa95a63428385b542c2066cd2d8ea1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4ee7394c8bfa95a63428385b542c2066cd2d8ea1" }, { "reference_url": "https://github.com/moodle/moodle/commit/54d6ee8c0874d72705ffa4c7c17d7c90bc16c897", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/54d6ee8c0874d72705ffa4c7c17d7c90bc16c897" }, { "reference_url": "https://github.com/moodle/moodle/commit/61da84e4148aa1de83a6389eb77abf3bbf09a349", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/61da84e4148aa1de83a6389eb77abf3bbf09a349" }, { "reference_url": "https://github.com/moodle/moodle/commit/82d0c0b5218e9ceb35a4e24b4a4e1e2e9cfc840c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/82d0c0b5218e9ceb35a4e24b4a4e1e2e9cfc840c" }, { "reference_url": "https://github.com/moodle/moodle/commit/ce597604763272396e5cb8ec93859a8568020b8b", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ce597604763272396e5cb8ec93859a8568020b8b" }, { "reference_url": "https://github.com/moodle/moodle/commit/d9d8e9c3fe92c5f25e319a38fe5617088965ad20", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d9d8e9c3fe92c5f25e319a38fe5617088965ad20" }, { "reference_url": "https://github.com/moodle/moodle/commit/f4fcb1c4f76488d4571d3d265efce3813676c45d", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f4fcb1c4f76488d4571d3d265efce3813676c45d" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330174", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330174" }, { "reference_url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2152", "reference_id": "CVE-2016-2152", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2152" }, { "reference_url": "https://github.com/advisories/GHSA-6mxm-wpqv-675h", "reference_id": "GHSA-6mxm-wpqv-675h", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6mxm-wpqv-675h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2152", "GHSA-6mxm-wpqv-675h" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-an53-nu91-k3d7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40471?format=api", "vulnerability_id": "VCID-bjnq-q2nd-1khp", "summary": "Cross-Site Request Forgery (CSRF)\nThe login form is not protected by a token to prevent login cross-site request forgery.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16854", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01178", "scoring_system": "epss", "scoring_elements": "0.79103", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01178", "scoring_system": "epss", "scoring_elements": "0.79076", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16854" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16854", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16854" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=378731", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=378731" }, { "reference_url": "http://www.securityfocus.com/bid/106017", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/106017" }, { "reference_url": "http://www.securitytracker.com/id/1042154", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1042154" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16854", "reference_id": "CVE-2018-16854", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16854" }, { "reference_url": "https://github.com/advisories/GHSA-xj5f-qv37-r9jc", "reference_id": "GHSA-xj5f-qv37-r9jc", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xj5f-qv37-r9jc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/57083?format=api", "purl": "pkg:composer/moodle/moodle@3.1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/57084?format=api", "purl": "pkg:composer/moodle/moodle@3.3.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/57085?format=api", "purl": "pkg:composer/moodle/moodle@3.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/57086?format=api", "purl": "pkg:composer/moodle/moodle@3.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.3" } ], "aliases": [ "CVE-2018-16854", "GHSA-xj5f-qv37-r9jc" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bjnq-q2nd-1khp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43698?format=api", "vulnerability_id": "VCID-cvqm-kjhx-q7ej", "summary": "Cross-Site Request Forgery (CSRF)\nCross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0126", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31466", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31397", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0126" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/41a19bffeef0ee6b0560a5ff808fd4bd35075fa1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/41a19bffeef0ee6b0560a5ff808fd4bd35075fa1" }, { "reference_url": "https://github.com/moodle/moodle/commit/caf766507771e07c1752ece1f37a32b2b4f6d8b9", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/caf766507771e07c1752ece1f37a32b2b4f6d8b9" }, { "reference_url": "https://github.com/moodle/moodle/commit/ea8647b39ec9cf1d73e04b05559bd12d97aa5229", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ea8647b39ec9cf1d73e04b05559bd12d97aa5229" }, { "reference_url": "https://github.com/moodle/moodle/commit/eee61675f042a9ec89f8f6d219b4ded010198fe4", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/eee61675f042a9ec89f8f6d219b4ded010198fe4" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256423", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256423" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0126", "reference_id": "CVE-2014-0126", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0126" }, { "reference_url": "https://github.com/advisories/GHSA-4wvg-7886-83gv", "reference_id": "GHSA-4wvg-7886-83gv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4wvg-7886-83gv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0126", "GHSA-4wvg-7886-83gv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cvqm-kjhx-q7ej" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43321?format=api", "vulnerability_id": "VCID-czph-uxwr-5uge", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via an external badge.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46042", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46042" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3547", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.52251", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00285", "scoring_system": "epss", "scoring_elements": "0.52191", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3547" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0174a0a57f6d84e240dd0bc0df0ffa63c3cc5a88", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0174a0a57f6d84e240dd0bc0df0ffa63c3cc5a88" }, { "reference_url": "https://github.com/moodle/moodle/commit/200a2b7fad3f7ef92b3171a07d68df6958d842b7", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/200a2b7fad3f7ef92b3171a07d68df6958d842b7" }, { "reference_url": "https://github.com/moodle/moodle/commit/9eef6b5237520f0cb9874564e577c64e3a831987", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9eef6b5237520f0cb9874564e577c64e3a831987" }, { "reference_url": "https://github.com/moodle/moodle/commit/ea76b652fc4f3600403a61e54f198cc8570a4234", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ea76b652fc4f3600403a61e54f198cc8570a4234" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264269", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264269" }, { "reference_url": "http://www.securityfocus.com/bid/68758", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/68758" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3547", "reference_id": "CVE-2014-3547", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3547" }, { "reference_url": "https://github.com/advisories/GHSA-hwjv-mc78-cccj", "reference_id": "GHSA-hwjv-mc78-cccj", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hwjv-mc78-cccj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3547", "GHSA-hwjv-mc78-cccj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-czph-uxwr-5uge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39325?format=api", "vulnerability_id": "VCID-duna-st9c-mqbk", "summary": "Information Exposure\nIn Moodle, the quiz web services allow students to see quiz results when it is prohibited in the settings.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1044", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.3998", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.40062", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1044" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=364383", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=364383" }, { "reference_url": "http://www.securityfocus.com/bid/102754", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/102754" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1044", "reference_id": "CVE-2018-1044", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1044" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54885?format=api", "purl": "pkg:composer/moodle/moodle@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/54886?format=api", "purl": "pkg:composer/moodle/moodle@3.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/moodle/moodle@3.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/54896?format=api", "purl": "pkg:composer/moodle/moodle@3.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1" } ], "aliases": [ "CVE-2018-1044", "GHSA-332g-xh34-5c96" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-duna-st9c-mqbk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43463?format=api", "vulnerability_id": "VCID-ea5s-xphb-6ub7", "summary": "Exposure of Sensitive Information to an Unauthorized Actor\nmod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45463", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45463" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3542", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00427", "scoring_system": "epss", "scoring_elements": "0.62794", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00427", "scoring_system": "epss", "scoring_elements": "0.62749", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3542" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/78ed99ec7e5e75b283e844adb058140d6ba0ff14", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/78ed99ec7e5e75b283e844adb058140d6ba0ff14" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264263", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264263" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3542", "reference_id": "CVE-2014-3542", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3542" }, { "reference_url": "https://github.com/advisories/GHSA-xmwv-mqh8-4xgw", "reference_id": "GHSA-xmwv-mqh8-4xgw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xmwv-mqh8-4xgw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3542", "GHSA-xmwv-mqh8-4xgw" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ea5s-xphb-6ub7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38125?format=api", "vulnerability_id": "VCID-eaqp-7abt-6kg9", "summary": "Improper Access Control\nThe `save_submission` function in `mod/assign/externallib.php` in Moodle allows remote authenticated users to bypass intended due-date restrictions by leveraging the student role for a web-service request.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2159", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0021", "scoring_system": "epss", "scoring_elements": "0.43476", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0021", "scoring_system": "epss", "scoring_elements": "0.43403", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2159" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0766509ab02353008af62f953f7ebc0f6210411a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0766509ab02353008af62f953f7ebc0f6210411a" }, { "reference_url": "https://github.com/moodle/moodle/commit/3c069c16db62d0e0a64137578e92c22d604dd261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3c069c16db62d0e0a64137578e92c22d604dd261" }, { "reference_url": "https://github.com/moodle/moodle/commit/711f9468d4e2792afe0f2025ac98c52ee3e4ee71", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/711f9468d4e2792afe0f2025ac98c52ee3e4ee71" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc8421575f35585a7a4fc1c9710dafd1d0483d4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc8421575f35585a7a4fc1c9710dafd1d0483d4e" }, { "reference_url": "https://github.com/moodle/moodle/commit/ea8987644fdbbee291337263598b0c3c7bf27c36", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ea8987644fdbbee291337263598b0c3c7bf27c36" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330182", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330182" }, { "reference_url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2159", "reference_id": "CVE-2016-2159", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2159" }, { "reference_url": "https://github.com/advisories/GHSA-cw72-69wq-f9f2", "reference_id": "GHSA-cw72-69wq-f9f2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cw72-69wq-f9f2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2159", "GHSA-cw72-69wq-f9f2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eaqp-7abt-6kg9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51697?format=api", "vulnerability_id": "VCID-eu27-a3px-87ed", "summary": "Improper Access Control\nTeachers in an assignment group could modify group overrides for other groups in the same assignment.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10189", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36116", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36022", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10189" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10189", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10189" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388570", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388570" }, { "reference_url": "http://www.securityfocus.com/bid/109271", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/109271" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10189", "reference_id": "CVE-2019-10189", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10189" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10189", "GHSA-h7xp-7fjp-ghhc" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eu27-a3px-87ed" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38450?format=api", "vulnerability_id": "VCID-fsex-f512-pudv", "summary": "Injection Vulnerability\nIn Moodle, text injection can occur in email headers, potentially leading to outbound spam.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-5013", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00363", "scoring_system": "epss", "scoring_elements": "0.58644", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00363", "scoring_system": "epss", "scoring_elements": "0.58691", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-5013" }, { "reference_url": "https://github.com/moodle/moodle/commit/ed63718caa48803843a14140d8a27f04aba9c8c4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ed63718caa48803843a14140d8a27f04aba9c8c4" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=336698", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=336698" }, { "reference_url": "https://web.archive.org/web/20210123154543/http://www.securityfocus.com/bid/92040", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210123154543/http://www.securityfocus.com/bid/92040" }, { "reference_url": "http://www.securityfocus.com/bid/92040", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/92040" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5013", "reference_id": "CVE-2016-5013", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5013" }, { "reference_url": "https://github.com/advisories/GHSA-2hh3-jmv8-5fmx", "reference_id": "GHSA-2hh3-jmv8-5fmx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2hh3-jmv8-5fmx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53190?format=api", "purl": "pkg:composer/moodle/moodle@2.7.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/206034?format=api", "purl": "pkg:composer/moodle/moodle@2.9.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/53192?format=api", "purl": "pkg:composer/moodle/moodle@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/53193?format=api", "purl": "pkg:composer/moodle/moodle@3.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/53189?format=api", "purl": "pkg:composer/moodle/moodle@3.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-e2zc-7ujn-wybu" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.1" } ], "aliases": [ "CVE-2016-5013", "GHSA-2hh3-jmv8-5fmx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fsex-f512-pudv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43695?format=api", "vulnerability_id": "VCID-gdz8-d8j3-nqdh", "summary": "Moodle allows attackers to obtain sensitive information\nThe identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 do not properly restrict the display of e-mail addresses, which allows remote authenticated users to obtain sensitive information by using the (1) Forum or (2) Quiz module.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43916", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43916" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0124", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.41913", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.41837", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0124" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/2978623cda4521773fe2d45e04bee76601de487f", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2978623cda4521773fe2d45e04bee76601de487f" }, { "reference_url": "https://github.com/moodle/moodle/commit/ae0ec61180ec71cb5b158633b0a3523a7ca41a82", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ae0ec61180ec71cb5b158633b0a3523a7ca41a82" }, { "reference_url": "https://github.com/moodle/moodle/commit/db4e2c4cd47d48ebf06424d942bf603a8fa94d97", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/db4e2c4cd47d48ebf06424d942bf603a8fa94d97" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc8f55c30211efd6fac80386e5b3bffef31cca13", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc8f55c30211efd6fac80386e5b3bffef31cca13" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256421", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256421" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0124", "reference_id": "CVE-2014-0124", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0124" }, { "reference_url": "https://github.com/advisories/GHSA-fc5p-vj3h-x7g4", "reference_id": "GHSA-fc5p-vj3h-x7g4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fc5p-vj3h-x7g4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0124", "GHSA-fc5p-vj3h-x7g4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gdz8-d8j3-nqdh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43392?format=api", "vulnerability_id": "VCID-h8xn-n98n-qqdv", "summary": "Exposure of Sensitive Information to an Unauthorized Actor\nmod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.", "references": [ { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3543", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00427", "scoring_system": "epss", "scoring_elements": "0.62749", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00427", "scoring_system": "epss", "scoring_elements": "0.62794", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3543" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/595ef4772d330a20c757635ab090acdcc9b2a2fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/595ef4772d330a20c757635ab090acdcc9b2a2fa" }, { "reference_url": "https://git.moodle.org/gw?p=moodle.git;a=commit;h=595ef4772d330a20c757635ab090acdcc9b2a2fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.moodle.org/gw?p=moodle.git;a=commit;h=595ef4772d330a20c757635ab090acdcc9b2a2fa" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264264", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264264" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3543", "reference_id": "CVE-2014-3543", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3543" }, { "reference_url": "https://github.com/advisories/GHSA-27j2-c838-c3qg", "reference_id": "GHSA-27j2-c838-c3qg", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-27j2-c838-c3qg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3543", "GHSA-27j2-c838-c3qg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h8xn-n98n-qqdv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43764?format=api", "vulnerability_id": "VCID-j3t3-svwb-p7bn", "summary": "Cross-Site Request Forgery (CSRF)\nMultiple cross-site request forgery (CSRF) vulnerabilities in mod/assign/locallib.php in the Assignment subsystem in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allow remote attackers to hijack the authentication of teachers for quick-grading requests.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44606", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44606" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/05/19/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/05/19/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0213", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31466", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31397", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0213" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0cd720fe512d48c2af81fc054c042c9c63e8a234", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0cd720fe512d48c2af81fc054c042c9c63e8a234" }, { "reference_url": "https://github.com/moodle/moodle/commit/436ef91ceb3cedfbf7297cb9e09ef69c0b323d77", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/436ef91ceb3cedfbf7297cb9e09ef69c0b323d77" }, { "reference_url": "https://github.com/moodle/moodle/commit/a57eacc114ee8e5423102000c9954f66f03ffeb2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a57eacc114ee8e5423102000c9954f66f03ffeb2" }, { "reference_url": "https://github.com/moodle/moodle/commit/f977d376c936ba09872884dc822463e76f6cfeb6", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f977d376c936ba09872884dc822463e76f6cfeb6" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=260361", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=260361" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0213", "reference_id": "CVE-2014-0213", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0213" }, { "reference_url": "https://github.com/advisories/GHSA-h75f-hjcr-cvh8", "reference_id": "GHSA-h75f-hjcr-cvh8", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h75f-hjcr-cvh8" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62207?format=api", "purl": "pkg:composer/moodle/moodle@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62208?format=api", "purl": "pkg:composer/moodle/moodle@2.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.3" } ], "aliases": [ "CVE-2014-0213", "GHSA-h75f-hjcr-cvh8" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j3t3-svwb-p7bn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53998?format=api", "vulnerability_id": "VCID-jcq6-btgz-fkf6", "summary": "Cross-site Scripting\nIt was found in Moodle that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20183", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00455", "scoring_system": "epss", "scoring_elements": "0.64171", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20183" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc9de7b0d487b73c23c221dc0b8b6e01654921f3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc9de7b0d487b73c23c221dc0b8b6e01654921f3" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417166", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417166" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20183", "reference_id": "CVE-2021-20183", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20183" }, { "reference_url": "https://github.com/advisories/GHSA-xhfx-rm8q-c3xv", "reference_id": "GHSA-xhfx-rm8q-c3xv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xhfx-rm8q-c3xv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/152240?format=api", "purl": "pkg:composer/moodle/moodle@4.0.0-beta", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.0.0-beta" } ], "aliases": [ "CVE-2021-20183", "GHSA-xhfx-rm8q-c3xv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jcq6-btgz-fkf6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38249?format=api", "vulnerability_id": "VCID-k1bh-ymgt-e7cd", "summary": "Unrestricted Upload of File with Dangerous Type\nUnrestricted file upload vulnerability in the double extension support in the \"image\" module in Moodle allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9187", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02078", "scoring_system": "epss", "scoring_elements": "0.84307", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02078", "scoring_system": "epss", "scoring_elements": "0.84283", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9187" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html" }, { "reference_url": "http://www.securityfocus.com/bid/94191", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/94191" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9187", "reference_id": "CVE-2016-9187", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9187" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52966?format=api", "purl": "pkg:composer/moodle/moodle@3.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-e2zc-7ujn-wybu" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.3" } ], "aliases": [ "CVE-2016-9187", "GHSA-58fm-v4pr-jh8p" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k1bh-ymgt-e7cd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38124?format=api", "vulnerability_id": "VCID-k6pw-51st-b3d2", "summary": "Cross-site Scripting\nCross-site scripting (XSS) vulnerability in the `advanced-search` feature in `mod_data` in Moodle allows remote attackers to inject arbitrary web script or HTML via a crafted field in a URL.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2153", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.45061", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.44992", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2153" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/87e60e529939c60ef5b07d70c37426d359b2e8a2", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/87e60e529939c60ef5b07d70c37426d359b2e8a2" }, { "reference_url": "https://github.com/moodle/moodle/commit/8f95eac1634b4d84053cef52a03065e620d6adf2", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8f95eac1634b4d84053cef52a03065e620d6adf2" }, { "reference_url": "https://github.com/moodle/moodle/commit/a5fae3b0d21cc85a7ea2d2c2af8c7fc9acf2fd92", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a5fae3b0d21cc85a7ea2d2c2af8c7fc9acf2fd92" }, { "reference_url": "https://github.com/moodle/moodle/commit/de60fc23aeeef5631d5718469124af3257383ead", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/de60fc23aeeef5631d5718469124af3257383ead" }, { "reference_url": "https://github.com/moodle/moodle/commit/ead2dd9c161fcfde04ee1fa602e9101a47c53503", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ead2dd9c161fcfde04ee1fa602e9101a47c53503" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330175", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330175" }, { "reference_url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2153", "reference_id": "CVE-2016-2153", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2153" }, { "reference_url": "https://github.com/advisories/GHSA-mj85-3hqq-r6r9", "reference_id": "GHSA-mj85-3hqq-r6r9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mj85-3hqq-r6r9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2153", "GHSA-mj85-3hqq-r6r9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k6pw-51st-b3d2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40834?format=api", "vulnerability_id": "VCID-k73h-z6j8-gkgz", "summary": "Information Exposure\nThe `/userpix/` page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64372", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64372" }, { "reference_url": "http://packetstormsecurity.com/files/162399/Moodle-3.6.1-Cross-Site-Scripting.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/162399/Moodle-3.6.1-Cross-Site-Scripting.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3810", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08385", "scoring_system": "epss", "scoring_elements": "0.92457", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08385", "scoring_system": "epss", "scoring_elements": "0.9247", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3810" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3810", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3810" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=381230#p1536767", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=381230#p1536767" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/49814.txt", "reference_id": "CVE-2019-3810", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/49814.txt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3810", "reference_id": "CVE-2019-3810", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3810" }, { "reference_url": "https://github.com/advisories/GHSA-wm4w-8vc6-2j4h", "reference_id": "GHSA-wm4w-8vc6-2j4h", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wm4w-8vc6-2j4h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/57083?format=api", "purl": "pkg:composer/moodle/moodle@3.1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/57634?format=api", "purl": "pkg:composer/moodle/moodle@3.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/57085?format=api", "purl": "pkg:composer/moodle/moodle@3.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/57641?format=api", "purl": "pkg:composer/moodle/moodle@3.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/57086?format=api", "purl": "pkg:composer/moodle/moodle@3.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/57642?format=api", "purl": "pkg:composer/moodle/moodle@3.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/57640?format=api", "purl": "pkg:composer/moodle/moodle@3.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/57643?format=api", "purl": "pkg:composer/moodle/moodle@3.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.2" } ], "aliases": [ "CVE-2019-3810", "GHSA-wm4w-8vc6-2j4h" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k73h-z6j8-gkgz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41134?format=api", "vulnerability_id": "VCID-m3np-aebb-8qaa", "summary": "Improper Access Control\nA web service fetching messages was not restricted to the current user's conversations.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10154", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00236", "scoring_system": "epss", "scoring_elements": "0.46787", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00236", "scoring_system": "epss", "scoring_elements": "0.4672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10154" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/2904a7f851da8e66be12f41d55068bf07817fbd6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2904a7f851da8e66be12f41d55068bf07817fbd6" }, { "reference_url": "https://github.com/moodle/moodle/commit/a3d19efab4aff83c07db9f0ad34c8f0e1f29c64c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a3d19efab4aff83c07db9f0ad34c8f0e1f29c64c" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=386521", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=386521" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10154", "reference_id": "CVE-2019-10154", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10154" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58258?format=api", "purl": "pkg:composer/moodle/moodle@3.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.4" } ], "aliases": [ "CVE-2019-10154", "GHSA-ww45-x87c-wgff" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m3np-aebb-8qaa" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39536?format=api", "vulnerability_id": "VCID-m4zv-e3dn-budf", "summary": "Improper Access Control\nUnauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1081", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00927", "scoring_system": "epss", "scoring_elements": "0.76428", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00927", "scoring_system": "epss", "scoring_elements": "0.76457", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1081" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-61392", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-61392" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=367938", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=367938" }, { "reference_url": "http://www.securityfocus.com/bid/103728", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/103728" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1081", "reference_id": "CVE-2018-1081", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1081" }, { "reference_url": "https://github.com/advisories/GHSA-v9xq-vh72-chr4", "reference_id": "GHSA-v9xq-vh72-chr4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v9xq-vh72-chr4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/55318?format=api", "purl": "pkg:composer/moodle/moodle@3.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/55319?format=api", "purl": "pkg:composer/moodle/moodle@3.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/55320?format=api", "purl": "pkg:composer/moodle/moodle@3.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/55321?format=api", "purl": "pkg:composer/moodle/moodle@3.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.2" } ], "aliases": [ "CVE-2018-1081", "GHSA-v9xq-vh72-chr4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m4zv-e3dn-budf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53999?format=api", "vulnerability_id": "VCID-mkfz-e1ft-2bcw", "summary": "Code Injection\nIt was found in Moodle that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20187", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00679", "scoring_system": "epss", "scoring_elements": "0.7197", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20187" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417171", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417171" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20187", "reference_id": "CVE-2021-20187", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20187" }, { "reference_url": "https://github.com/advisories/GHSA-2jrm-gww7-wch2", "reference_id": "GHSA-2jrm-gww7-wch2", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2jrm-gww7-wch2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79637?format=api", "purl": "pkg:composer/moodle/moodle@3.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/79638?format=api", "purl": "pkg:composer/moodle/moodle@3.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/79639?format=api", "purl": "pkg:composer/moodle/moodle@3.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" } ], "aliases": [ "CVE-2021-20187", "GHSA-2jrm-gww7-wch2" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mkfz-e1ft-2bcw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53996?format=api", "vulnerability_id": "VCID-nntc-dsz1-e3fp", "summary": "Cross-site Scripting\nIt was found in Moodle that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20186", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0053", "scoring_system": "epss", "scoring_elements": "0.67569", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20186" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417170", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417170" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20186", "reference_id": "CVE-2021-20186", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20186" }, { "reference_url": "https://github.com/advisories/GHSA-h8m4-h385-qhqv", "reference_id": "GHSA-h8m4-h385-qhqv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h8m4-h385-qhqv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79637?format=api", "purl": "pkg:composer/moodle/moodle@3.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/79638?format=api", "purl": "pkg:composer/moodle/moodle@3.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/79639?format=api", "purl": "pkg:composer/moodle/moodle@3.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" } ], "aliases": [ "CVE-2021-20186", "GHSA-h8m4-h385-qhqv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nntc-dsz1-e3fp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43314?format=api", "vulnerability_id": "VCID-q3wv-9hj6-vbgt", "summary": "Moodle does not properly restrict access\nThe wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access, which allows remote authenticated users to perform wiki operations by leveraging the student role and using the Recent Activity block to reach the individual wiki of an arbitrary student.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39990", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39990" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0123", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00193", "scoring_system": "epss", "scoring_elements": "0.41115", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00193", "scoring_system": "epss", "scoring_elements": "0.41039", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0123" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3a7b9b76c2d3c58237bec56b3b537e05c23970ad", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3a7b9b76c2d3c58237bec56b3b537e05c23970ad" }, { "reference_url": "https://github.com/moodle/moodle/commit/d9596365e59ac53787105ff326f7f2bab5b9bada", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d9596365e59ac53787105ff326f7f2bab5b9bada" }, { "reference_url": "https://github.com/moodle/moodle/commit/e6499fb8a4463b1130babb09c42f3d5559276d17", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e6499fb8a4463b1130babb09c42f3d5559276d17" }, { "reference_url": "https://github.com/moodle/moodle/commit/fa0777902633b54ca5566dd8af304ce5587051e5", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/fa0777902633b54ca5566dd8af304ce5587051e5" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256419", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256419" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0123", "reference_id": "CVE-2014-0123", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0123" }, { "reference_url": "https://github.com/advisories/GHSA-2vhr-4mhq-m35c", "reference_id": "GHSA-2vhr-4mhq-m35c", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2vhr-4mhq-m35c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0123", "GHSA-2vhr-4mhq-m35c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q3wv-9hj6-vbgt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40841?format=api", "vulnerability_id": "VCID-qhv1-wgpm-7fh6", "summary": "Improper Authorization\nUsers could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3849", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59416", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59366", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3849" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/427463a52574e4b3bcbe1c65c49066438770641e", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/427463a52574e4b3bcbe1c65c49066438770641e" }, { "reference_url": "https://github.com/moodle/moodle/commit/430f685834cef190bdf58afabe79e765d596890d", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/430f685834cef190bdf58afabe79e765d596890d" }, { "reference_url": "https://github.com/moodle/moodle/commit/723d1a747555b795ed53a0fad01da455797bb78f", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/723d1a747555b795ed53a0fad01da455797bb78f" }, { "reference_url": "https://github.com/moodle/moodle/commit/898d5d05a0c3ae6795db0241bf3cb5951213d45c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/898d5d05a0c3ae6795db0241bf3cb5951213d45c" }, { "reference_url": "https://github.com/moodle/moodle/commit/b77dcd23d8e39265b5c096f0d947764c02d832c8", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b77dcd23d8e39265b5c096f0d947764c02d832c8" }, { "reference_url": "https://github.com/moodle/moodle/commit/cd3060d941a051931eb2613b25bafb0108665895", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cd3060d941a051931eb2613b25bafb0108665895" }, { "reference_url": "https://github.com/moodle/moodle/commit/fba7dcd90abd45210d782a79c6e25bb3840c7438", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/fba7dcd90abd45210d782a79c6e25bb3840c7438" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384012#p1547744", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384012#p1547744" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3849", "reference_id": "CVE-2019-3849", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3849" }, { "reference_url": "https://github.com/advisories/GHSA-5wg9-5w3f-hxmh", "reference_id": "GHSA-5wg9-5w3f-hxmh", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5wg9-5w3f-hxmh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3849", "GHSA-5wg9-5w3f-hxmh" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qhv1-wgpm-7fh6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43526?format=api", "vulnerability_id": "VCID-qpu2-8paz-7ydv", "summary": "Exposure of Sensitive Information to an Unauthorized Actor\nThe blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by (1) using a screen reader or (2) reading the HTML source.", "references": [ { "reference_url": "http://openwall.com/lists/oss-security/2014/05/19/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/05/19/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0215", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.41837", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00199", "scoring_system": "epss", "scoring_elements": "0.41913", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0215" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=260363", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=260363" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0215", "reference_id": "CVE-2014-0215", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0215" }, { "reference_url": "https://github.com/advisories/GHSA-2fmv-j5xj-4fmq", "reference_id": "GHSA-2fmv-j5xj-4fmq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2fmv-j5xj-4fmq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62207?format=api", "purl": "pkg:composer/moodle/moodle@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/52560?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ehh-qz6c-ykhp" }, { "vulnerability": "VCID-1rar-m2g3-27ag" }, { "vulnerability": "VCID-1z6j-fs6f-eua1" }, { "vulnerability": "VCID-29yj-e9bd-queq" }, { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-2y3m-yuaj-vkf2" }, { "vulnerability": "VCID-37j1-ym2f-1fbc" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-3xwm-hqap-8bct" }, { "vulnerability": "VCID-46jw-xjbu-b3f1" }, { "vulnerability": "VCID-4cx7-eaax-8uhr" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5c29-qn3p-3yde" }, { "vulnerability": "VCID-5nfq-4syg-87da" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-5vx4-qtb2-fqe9" }, { "vulnerability": "VCID-62yh-cpfr-9bb1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-8q4n-d565-kfbn" }, { "vulnerability": "VCID-95mq-m2jz-a3ab" }, { "vulnerability": "VCID-9z66-z9af-17f7" }, { "vulnerability": "VCID-a3pu-x51u-1udr" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-aqc8-tmeg-9fdd" }, { "vulnerability": "VCID-b9ej-hx7z-1bb8" }, { "vulnerability": "VCID-bfmx-cwap-8yhp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-czph-uxwr-5uge" }, { "vulnerability": "VCID-d3yp-gq4c-vyf8" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-ea5s-xphb-6ub7" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-emu7-jhv2-zqb8" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-evke-m8nn-6ua3" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-fumj-9pun-zfc5" }, { "vulnerability": "VCID-g4hn-yz26-1beb" }, { "vulnerability": "VCID-gvan-87dt-b7fp" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-hbky-xx53-vkct" }, { "vulnerability": "VCID-hck4-emsr-q7dc" }, { "vulnerability": "VCID-j11s-2mhg-pfdn" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-krn6-pwk5-ake2" }, { "vulnerability": "VCID-kzwd-2e6n-fkbm" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-n9uc-b76m-8fbs" }, { "vulnerability": "VCID-nfdb-m7rg-47ca" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r3f7-9paf-83ht" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-r88h-mteg-yka9" }, { "vulnerability": "VCID-rdfn-52p2-afa7" }, { "vulnerability": "VCID-rscq-xx52-2ua8" }, { "vulnerability": "VCID-s3bw-w61k-eqhy" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s5cy-eva4-wbaf" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-tmwc-f872-mufw" }, { "vulnerability": "VCID-ucg8-htfc-2bhn" }, { "vulnerability": "VCID-uptz-tj66-7yfk" }, { "vulnerability": "VCID-uvgt-7m5a-xkdc" }, { "vulnerability": "VCID-v4qm-48kk-pfaz" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-v6ha-ekxw-7bfr" }, { "vulnerability": "VCID-v7zm-cw8w-6yf8" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vda3-4fgr-gfbw" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vs2j-b4qg-nbgu" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-wavt-rrws-3yhs" }, { "vulnerability": "VCID-wawr-t9dc-33fj" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-xnmk-jah2-ufce" }, { "vulnerability": "VCID-xy2y-yxfu-xfgm" }, { "vulnerability": "VCID-y2vh-7r7h-9ugu" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0" } ], "aliases": [ "CVE-2014-0215", "GHSA-2fmv-j5xj-4fmq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qpu2-8paz-7ydv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43779?format=api", "vulnerability_id": "VCID-qxyw-7hnt-hqd6", "summary": "Improper Control of Generation of Code ('Code Injection')\nMoodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46148", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46148" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3545", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01284", "scoring_system": "epss", "scoring_elements": "0.79979", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01284", "scoring_system": "epss", "scoring_elements": "0.79954", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3545" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/blob/1474f74687dda57c7d011b92d16f25b9870d2799/question/type/calculated/question.php#L426", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/blob/1474f74687dda57c7d011b92d16f25b9870d2799/question/type/calculated/question.php#L426" }, { "reference_url": "https://github.com/moodle/moodle/commit/155bc7547227dc2047cfc8630cbfe121888b359b", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/155bc7547227dc2047cfc8630cbfe121888b359b" }, { "reference_url": "https://github.com/moodle/moodle/commit/29005a5418894b76e62e44bbc2c9e4ddee8f5ce6", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/29005a5418894b76e62e44bbc2c9e4ddee8f5ce6" }, { "reference_url": "https://github.com/moodle/moodle/commit/44f726a7b1d351b39bb2a6a30c1b30027fabd000", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/44f726a7b1d351b39bb2a6a30c1b30027fabd000" }, { "reference_url": "https://github.com/moodle/moodle/commit/539a25ff03fae377758d62caefcc71a2418e9a84", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/539a25ff03fae377758d62caefcc71a2418e9a84" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c6c172033e3fb4afce862f8b32b459f5c35ad19", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c6c172033e3fb4afce862f8b32b459f5c35ad19" }, { "reference_url": "https://github.com/moodle/moodle/commit/66de66fe6a8ce8f491562edad0a14f26d4808cb4", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/66de66fe6a8ce8f491562edad0a14f26d4808cb4" }, { "reference_url": "https://github.com/moodle/moodle/commit/770d3ce42669067eca2bcee22d142ed7fec08550", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/770d3ce42669067eca2bcee22d142ed7fec08550" }, { "reference_url": "https://github.com/moodle/moodle/commit/82b3260eab2db58dfa9510645fd2c60ee0ce142e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/82b3260eab2db58dfa9510645fd2c60ee0ce142e" }, { "reference_url": "https://github.com/moodle/moodle/commit/88ec9f308da6a4bc7a735458cdf72648357d501d", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/88ec9f308da6a4bc7a735458cdf72648357d501d" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264266", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264266" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3545", "reference_id": "CVE-2014-3545", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3545" }, { "reference_url": "https://github.com/advisories/GHSA-3m99-h3hp-w9j7", "reference_id": "GHSA-3m99-h3hp-w9j7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3m99-h3hp-w9j7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3545", "GHSA-3m99-h3hp-w9j7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qxyw-7hnt-hqd6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40842?format=api", "vulnerability_id": "VCID-r6kn-b963-eqge", "summary": "URL Redirection to Untrusted Site (Open Redirect)\nLinks within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3850", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00072", "scoring_system": "epss", "scoring_elements": "0.22114", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00072", "scoring_system": "epss", "scoring_elements": "0.22031", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3850" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1fc481dd7b09e08e85824c1fe6733b303a36bdce", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1fc481dd7b09e08e85824c1fe6733b303a36bdce" }, { "reference_url": "https://github.com/moodle/moodle/commit/772c908d40a944efd91d897d524b255626d330d4", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/772c908d40a944efd91d897d524b255626d330d4" }, { "reference_url": "https://github.com/moodle/moodle/commit/907b377e51c32ea37feef53e10684b504e103273", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/907b377e51c32ea37feef53e10684b504e103273" }, { "reference_url": "https://github.com/moodle/moodle/commit/d3f2f990dd3c5d4e6073a77154c6423d1c304647", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d3f2f990dd3c5d4e6073a77154c6423d1c304647" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384013#p1547745", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384013#p1547745" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3850", "reference_id": "CVE-2019-3850", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3850" }, { "reference_url": "https://github.com/advisories/GHSA-3fj7-9j8m-7r8g", "reference_id": "GHSA-3fj7-9j8m-7r8g", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3fj7-9j8m-7r8g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57662?format=api", "purl": "pkg:composer/moodle/moodle@3.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3850", "GHSA-3fj7-9j8m-7r8g" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r6kn-b963-eqge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43446?format=api", "vulnerability_id": "VCID-r88h-mteg-yka9", "summary": "Improper Control of Generation of Code ('Code Injection')\nThe Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45616", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45616" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3541", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01935", "scoring_system": "epss", "scoring_elements": "0.83757", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01935", "scoring_system": "epss", "scoring_elements": "0.83734", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3541" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3fe105953d14766393e24372806fcf0a2b77c96d", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3fe105953d14766393e24372806fcf0a2b77c96d" }, { "reference_url": "https://github.com/moodle/moodle/commit/40d52d4067c2ee062a5b16c780753c6f97413894", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/40d52d4067c2ee062a5b16c780753c6f97413894" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c4ef26c39d3106315f74c26cdcca779ba74254c", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c4ef26c39d3106315f74c26cdcca779ba74254c" }, { "reference_url": "https://github.com/moodle/moodle/commit/61961447c29d48e5a494e7c02e653d6ff00551b2", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/61961447c29d48e5a494e7c02e653d6ff00551b2" }, { "reference_url": "https://github.com/moodle/moodle/commit/68170f0b01ccaade799c4cab2312ce6a825fb844", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/68170f0b01ccaade799c4cab2312ce6a825fb844" }, { "reference_url": "https://github.com/moodle/moodle/commit/7bcf9b1e2cbdd1e877b828da75b17e3f8318fafc", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7bcf9b1e2cbdd1e877b828da75b17e3f8318fafc" }, { "reference_url": "https://github.com/moodle/moodle/commit/867f40990bde6152e01604d106ddac8433018f42", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/867f40990bde6152e01604d106ddac8433018f42" }, { "reference_url": "https://github.com/moodle/moodle/commit/cb2b42aed8d9ce3c9840ad825f2e0e7e81bfad91", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cb2b42aed8d9ce3c9840ad825f2e0e7e81bfad91" }, { "reference_url": "https://github.com/moodle/moodle/commit/e29bb97c0756de511ba287b40790d8275a991d33", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e29bb97c0756de511ba287b40790d8275a991d33" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264262", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3541", "reference_id": "CVE-2014-3541", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3541" }, { "reference_url": "https://github.com/advisories/GHSA-fccf-p8fx-vjj4", "reference_id": "GHSA-fccf-p8fx-vjj4", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fccf-p8fx-vjj4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3541", "GHSA-fccf-p8fx-vjj4" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r88h-mteg-yka9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43540?format=api", "vulnerability_id": "VCID-rdfn-52p2-afa7", "summary": "Moodle Temporary Passwords are Brute Force-able\nThe generate_password function in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide a sufficient number of possible temporary passwords, which allows remote attackers to obtain access via a brute-force attack.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47050", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47050" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/11/17/11", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/11/17/11" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-7845", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00712", "scoring_system": "epss", "scoring_elements": "0.7271", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00712", "scoring_system": "epss", "scoring_elements": "0.72672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-7845" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/04f2e83ce76cf931e6614497c1a7cc6c8afb9454", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/04f2e83ce76cf931e6614497c1a7cc6c8afb9454" }, { "reference_url": "https://github.com/moodle/moodle/commit/3128901f99d41d9368e81ffc67f4bc0535221e02", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3128901f99d41d9368e81ffc67f4bc0535221e02" }, { "reference_url": "https://github.com/moodle/moodle/commit/40a04658232d898223462f84d8cd35510338acbe", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/40a04658232d898223462f84d8cd35510338acbe" }, { "reference_url": "https://github.com/moodle/moodle/commit/ece03f3b13c5eefa7bb008401b9414eed620eebc", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ece03f3b13c5eefa7bb008401b9414eed620eebc" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=275152", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=275152" }, { "reference_url": "https://web.archive.org/web/20150914064838/http://www.securitytracker.com/id/1031215", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20150914064838/http://www.securitytracker.com/id/1031215" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7845", "reference_id": "CVE-2014-7845", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7845" }, { "reference_url": "https://github.com/advisories/GHSA-9v64-447r-wch6", "reference_id": "GHSA-9v64-447r-wch6", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9v64-447r-wch6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62092?format=api", "purl": "pkg:composer/moodle/moodle@2.5.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-hbky-xx53-vkct" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-uptz-tj66-7yfk" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/62093?format=api", "purl": "pkg:composer/moodle/moodle@2.6.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62094?format=api", "purl": "pkg:composer/moodle/moodle@2.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.3" } ], "aliases": [ "CVE-2014-7845", "GHSA-9v64-447r-wch6" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rdfn-52p2-afa7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43448?format=api", "vulnerability_id": "VCID-s5cy-eva4-wbaf", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46223", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46223" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3551", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00251", "scoring_system": "epss", "scoring_elements": "0.48652", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00251", "scoring_system": "epss", "scoring_elements": "0.48589", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3551" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1f8eb0842835bcd1ea72b2d2982e0b5c8bc133bb", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1f8eb0842835bcd1ea72b2d2982e0b5c8bc133bb" }, { "reference_url": "https://github.com/moodle/moodle/commit/2c0b608cda12540de79aac0ee6952dda2c8ed947", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2c0b608cda12540de79aac0ee6952dda2c8ed947" }, { "reference_url": "https://github.com/moodle/moodle/commit/470a466d7f1e0aef030ad2178bbef5a81765c42e", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/470a466d7f1e0aef030ad2178bbef5a81765c42e" }, { "reference_url": "https://github.com/moodle/moodle/commit/4fc5861cbacdc2f4197faebd3d207d2811e0f09f", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4fc5861cbacdc2f4197faebd3d207d2811e0f09f" }, { "reference_url": "https://github.com/moodle/moodle/commit/555ee08b17dfe09e02391be137f60fe38c0a7865", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/555ee08b17dfe09e02391be137f60fe38c0a7865" }, { "reference_url": "https://github.com/moodle/moodle/commit/666248c264642e5ca27601b347fc6913517e2853", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/666248c264642e5ca27601b347fc6913517e2853" }, { "reference_url": "https://github.com/moodle/moodle/commit/68299e6154ae41b7e586904fd1b860cad7f65654", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/68299e6154ae41b7e586904fd1b860cad7f65654" }, { "reference_url": "https://github.com/moodle/moodle/commit/72d1a3ab0b002a9a5f32f3c2b61ffc9fa7f7b789", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/72d1a3ab0b002a9a5f32f3c2b61ffc9fa7f7b789" }, { "reference_url": "https://github.com/moodle/moodle/commit/7f4db6f4d9014370df0265ab846ad76235af0cae", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7f4db6f4d9014370df0265ab846ad76235af0cae" }, { "reference_url": "https://github.com/moodle/moodle/commit/8380722bb11f36d33308580aee169e161d3f2c14", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8380722bb11f36d33308580aee169e161d3f2c14" }, { "reference_url": "https://github.com/moodle/moodle/commit/8ecc049f7f020086c1881bdf573af16cf2d9f9c9", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8ecc049f7f020086c1881bdf573af16cf2d9f9c9" }, { "reference_url": "https://github.com/moodle/moodle/commit/98d5566c2270e21cbfaf1f4e8d61039f05d6aae2", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/98d5566c2270e21cbfaf1f4e8d61039f05d6aae2" }, { "reference_url": "https://github.com/moodle/moodle/commit/b5dacb548800ee10d4940c8ebeca48c3c2ae0512", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b5dacb548800ee10d4940c8ebeca48c3c2ae0512" }, { "reference_url": "https://github.com/moodle/moodle/commit/db5a6e6560c963849f8807184ca32efee6779264", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/db5a6e6560c963849f8807184ca32efee6779264" }, { "reference_url": "https://github.com/moodle/moodle/commit/e42b6e20bdd5d6f09bc09be22fd7f20736e27085", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e42b6e20bdd5d6f09bc09be22fd7f20736e27085" }, { "reference_url": "https://github.com/moodle/moodle/commit/eb1381de1dbcce0215dcdd62cfac4fe287beed4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/eb1381de1dbcce0215dcdd62cfac4fe287beed4e" }, { "reference_url": "https://github.com/moodle/moodle/commit/f25f472be425d6ef8aa587648dafda1bd4d1c5d8", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f25f472be425d6ef8aa587648dafda1bd4d1c5d8" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264273", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264273" }, { "reference_url": "https://web.archive.org/web/20200228170658/http://www.securityfocus.com/bid/68763", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200228170658/http://www.securityfocus.com/bid/68763" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3551", "reference_id": "CVE-2014-3551", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3551" }, { "reference_url": "https://github.com/advisories/GHSA-m8f5-9wg8-2c3h", "reference_id": "GHSA-m8f5-9wg8-2c3h", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m8f5-9wg8-2c3h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3551", "GHSA-m8f5-9wg8-2c3h" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s5cy-eva4-wbaf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40847?format=api", "vulnerability_id": "VCID-s6uu-335k-yfbc", "summary": "Improper Input Validation\nUsers with the \"login as other users\" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3847", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00867", "scoring_system": "epss", "scoring_elements": "0.75544", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00867", "scoring_system": "epss", "scoring_elements": "0.75516", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3847" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3847", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3847" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/070f24d006eab6b958eb083530de159b43c538ed", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/070f24d006eab6b958eb083530de159b43c538ed" }, { "reference_url": "https://github.com/moodle/moodle/commit/93dda3bfd3caaaa8d23fe8ede543f27ef774958d", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/93dda3bfd3caaaa8d23fe8ede543f27ef774958d" }, { "reference_url": "https://github.com/moodle/moodle/commit/a37e26d2efe1ca0e4d8d69c611a748af35b33674", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a37e26d2efe1ca0e4d8d69c611a748af35b33674" }, { "reference_url": "https://github.com/moodle/moodle/commit/e836242e1c04cd62d0afa4a790074fd245628e7a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e836242e1c04cd62d0afa4a790074fd245628e7a" }, { "reference_url": "https://github.com/moodle/moodle/commit/ec3b63c772d6448765c68268234cf36c1a91bcac", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ec3b63c772d6448765c68268234cf36c1a91bcac" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384010#p1547742", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384010#p1547742" }, { "reference_url": "https://web.archive.org/web/20200227082922/http://www.securityfocus.com/bid/107489", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227082922/http://www.securityfocus.com/bid/107489" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3847", "reference_id": "CVE-2019-3847", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3847" }, { "reference_url": "https://github.com/advisories/GHSA-qrcj-6fjw-3h9h", "reference_id": "GHSA-qrcj-6fjw-3h9h", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qrcj-6fjw-3h9h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57662?format=api", "purl": "pkg:composer/moodle/moodle@3.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3847", "GHSA-qrcj-6fjw-3h9h" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s6uu-335k-yfbc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43506?format=api", "vulnerability_id": "VCID-ucg8-htfc-2bhn", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45683", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45683" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss" }, { "reference_url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss/", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss/" }, { "reference_url": "http://osvdb.org/show/osvdb/109337", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://osvdb.org/show/osvdb/109337" }, { "reference_url": "http://packetstormsecurity.com/files/127624/Moodle-2.7-Cross-Site-Scripting.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/127624/Moodle-2.7-Cross-Site-Scripting.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3544", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00818", "scoring_system": "epss", "scoring_elements": "0.74742", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00818", "scoring_system": "epss", "scoring_elements": "0.74711", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3544" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0207466e778baebff21c7b72bc688761f9c5b0d9", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0207466e778baebff21c7b72bc688761f9c5b0d9" }, { "reference_url": "https://github.com/moodle/moodle/commit/739d227c58886e9a1be1426ed66053f1d37ee9a9", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/739d227c58886e9a1be1426ed66053f1d37ee9a9" }, { "reference_url": "https://github.com/moodle/moodle/commit/ce5a785b0962c3c94c7a7b0d36176482d21db95d", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ce5a785b0962c3c94c7a7b0d36176482d21db95d" }, { "reference_url": "https://github.com/moodle/moodle/commit/f7b6562f20f6af4119c7775477cffbaa83229f74", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f7b6562f20f6af4119c7775477cffbaa83229f74" }, { "reference_url": "http://www.exploit-db.com/exploits/34169", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.exploit-db.com/exploits/34169" }, { "reference_url": "http://www.securityfocus.com/bid/68756", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/68756" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3544", "reference_id": "CVE-2014-3544", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3544" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/34169.txt", "reference_id": "CVE-2014-3544;OSVDB-109337", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/34169.txt" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264265", "reference_id": "CVE-2014-3544;OSVDB-109337", "reference_type": "exploit", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264265" }, { "reference_url": "https://github.com/advisories/GHSA-c9jp-244j-vh78", "reference_id": "GHSA-c9jp-244j-vh78", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c9jp-244j-vh78" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3544", "GHSA-c9jp-244j-vh78" ], "risk_score": 5.4, "exploitability": "2.0", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ucg8-htfc-2bhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38449?format=api", "vulnerability_id": "VCID-vb67-yux5-ayhf", "summary": "Weak Password Recovery Mechanism for Forgotten Password\nIn Moodle, web service tokens are not invalidated when the user password is changed or forced to be changed.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7038", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00243", "scoring_system": "epss", "scoring_elements": "0.47695", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00243", "scoring_system": "epss", "scoring_elements": "0.47758", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7038" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=339631", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=339631" }, { "reference_url": "http://www.securityfocus.com/bid/93174", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/93174" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7038", "reference_id": "CVE-2016-7038", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7038" }, { "reference_url": "https://github.com/advisories/GHSA-2phx-w35g-x9vm", "reference_id": "GHSA-2phx-w35g-x9vm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2phx-w35g-x9vm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53194?format=api", "purl": "pkg:composer/moodle/moodle@2.7.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/206034?format=api", "purl": "pkg:composer/moodle/moodle@2.9.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/53195?format=api", "purl": "pkg:composer/moodle/moodle@2.9.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/53196?format=api", "purl": "pkg:composer/moodle/moodle@3.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/52965?format=api", "purl": "pkg:composer/moodle/moodle@3.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-e2zc-7ujn-wybu" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.2" } ], "aliases": [ "CVE-2016-7038", "GHSA-2phx-w35g-x9vm" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vb67-yux5-ayhf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40246?format=api", "vulnerability_id": "VCID-vfp6-4h8n-bkax", "summary": "Code Injection\nMoodle is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy `drag and drop into text` (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-62880", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-62880" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-14630", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01859", "scoring_system": "epss", "scoring_elements": "0.83425", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01859", "scoring_system": "epss", "scoring_elements": "0.83401", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-14630" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14630", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14630" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/09cbca8566a388e8f0a1a0cfd86cd0667088ed2c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/09cbca8566a388e8f0a1a0cfd86cd0667088ed2c" }, { "reference_url": "https://github.com/moodle/moodle/commit/be092b730910ad97fff0511e177a097ec1cc4b1c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/be092b730910ad97fff0511e177a097ec1cc4b1c" }, { "reference_url": "https://github.com/moodle/moodle/commit/cb8aefa658cf7ad8f002a480343afb2dea94cc08", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cb8aefa658cf7ad8f002a480343afb2dea94cc08" }, { "reference_url": "https://github.com/moodle/moodle/commit/cfc4393aa689c277a27b9a040ff7dcbdac4e41dd", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cfc4393aa689c277a27b9a040ff7dcbdac4e41dd" }, { "reference_url": "https://github.com/moodle/moodle/commit/da1eeea0ff3d292b7669e478abc114872dd9cc8f", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/da1eeea0ff3d292b7669e478abc114872dd9cc8f" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=376023", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=376023" }, { "reference_url": "https://seclists.org/fulldisclosure/2018/Sep/28", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://seclists.org/fulldisclosure/2018/Sep/28" }, { "reference_url": "https://web.archive.org/web/20200227111301/https://www.securityfocus.com/bid/105354", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227111301/https://www.securityfocus.com/bid/105354" }, { "reference_url": "https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630" }, { "reference_url": "https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630/" }, { "reference_url": "http://www.securityfocus.com/bid/105354", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/105354" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14630", "reference_id": "CVE-2018-14630", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14630" }, { "reference_url": "https://github.com/advisories/GHSA-c3pr-h96w-2jjg", "reference_id": "GHSA-c3pr-h96w-2jjg", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c3pr-h96w-2jjg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/56464?format=api", "purl": "pkg:composer/moodle/moodle@3.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/56461?format=api", "purl": "pkg:composer/moodle/moodle@3.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56462?format=api", "purl": "pkg:composer/moodle/moodle@3.4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/56463?format=api", "purl": "pkg:composer/moodle/moodle@3.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.2" } ], "aliases": [ "CVE-2018-14630", "GHSA-c3pr-h96w-2jjg" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vfp6-4h8n-bkax" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43755?format=api", "vulnerability_id": "VCID-vrfy-36yc-muhr", "summary": "Moodle allows attackers to modify the visibility of a badge\nbadges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility of an arbitrary badge via unspecified vectors.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44140", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44140" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0129", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00193", "scoring_system": "epss", "scoring_elements": "0.41115", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00193", "scoring_system": "epss", "scoring_elements": "0.41039", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0129" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/100ec861820ce763d4f25a9f98649bb1ae17e7a5", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/100ec861820ce763d4f25a9f98649bb1ae17e7a5" }, { "reference_url": "https://github.com/moodle/moodle/commit/28c8ac2c4a8d831f0efd653fa499a5d2384e6e88", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/28c8ac2c4a8d831f0efd653fa499a5d2384e6e88" }, { "reference_url": "https://github.com/moodle/moodle/commit/c5d7d20f40a71e23d951c7272675a19fef170fbe", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/c5d7d20f40a71e23d951c7272675a19fef170fbe" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256424", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256424" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0129", "reference_id": "CVE-2014-0129", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0129" }, { "reference_url": "https://github.com/advisories/GHSA-5rr5-fxhc-jv64", "reference_id": "GHSA-5rr5-fxhc-jv64", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5rr5-fxhc-jv64" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "aliases": [ "CVE-2014-0129", "GHSA-5rr5-fxhc-jv64" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vrfy-36yc-muhr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43785?format=api", "vulnerability_id": "VCID-vs2j-b4qg-nbgu", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45471", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45471" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3548", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00256", "scoring_system": "epss", "scoring_elements": "0.49209", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00256", "scoring_system": "epss", "scoring_elements": "0.49148", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3548" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/166e18d7cbb36d58d08a2783edd98284d5a3b98a", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/166e18d7cbb36d58d08a2783edd98284d5a3b98a" }, { "reference_url": "https://github.com/moodle/moodle/commit/53ca351f7af8d80a0ff0aba27a1c278fb731d288", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/53ca351f7af8d80a0ff0aba27a1c278fb731d288" }, { "reference_url": "https://github.com/moodle/moodle/commit/6eb787b873f5d3718dc8a74f798ee528d600d8fe", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/6eb787b873f5d3718dc8a74f798ee528d600d8fe" }, { "reference_url": "https://github.com/moodle/moodle/commit/a1ae35173b54ed0c2c3736dfa78cad9899a55d4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a1ae35173b54ed0c2c3736dfa78cad9899a55d4e" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264270", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264270" }, { "reference_url": "https://web.archive.org/web/20200228161543/http://www.securityfocus.com/bid/68766", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200228161543/http://www.securityfocus.com/bid/68766" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3548", "reference_id": "CVE-2014-3548", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3548" }, { "reference_url": "https://github.com/advisories/GHSA-f66h-6mj2-rwj2", "reference_id": "GHSA-f66h-6mj2-rwj2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f66h-6mj2-rwj2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3548", "GHSA-f66h-6mj2-rwj2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vs2j-b4qg-nbgu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43447?format=api", "vulnerability_id": "VCID-vwyj-z4gf-8fg5", "summary": "Improper Authentication\nlogin/token.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 creates a MoodleMobile web-service token with an infinite lifetime, which makes it easier for remote attackers to hijack sessions via a brute-force attack.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43119", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43119" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/05/19/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/05/19/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0214", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00466", "scoring_system": "epss", "scoring_elements": "0.64797", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00466", "scoring_system": "epss", "scoring_elements": "0.64755", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0214" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/14c16a416373f68c36b65f4653c0bd076eb0b290", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/14c16a416373f68c36b65f4653c0bd076eb0b290" }, { "reference_url": "https://github.com/moodle/moodle/commit/437240b5aa7719f1b8cce1e0f45ac0708c72cc23", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/437240b5aa7719f1b8cce1e0f45ac0708c72cc23" }, { "reference_url": "https://github.com/moodle/moodle/commit/679e323aaab2a968b8e87862e1658814645db525", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/679e323aaab2a968b8e87862e1658814645db525" }, { "reference_url": "https://github.com/moodle/moodle/commit/b5b2eab6778bee166e20bc5eec0138d89795ac3d", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b5b2eab6778bee166e20bc5eec0138d89795ac3d" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=260362", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=260362" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0214", "reference_id": "CVE-2014-0214", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0214" }, { "reference_url": "https://github.com/advisories/GHSA-48rq-vj58-2mh6", "reference_id": "GHSA-48rq-vj58-2mh6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-48rq-vj58-2mh6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62207?format=api", "purl": "pkg:composer/moodle/moodle@2.5.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62208?format=api", "purl": "pkg:composer/moodle/moodle@2.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.3" } ], "aliases": [ "CVE-2014-0214", "GHSA-48rq-vj58-2mh6" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vwyj-z4gf-8fg5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51693?format=api", "vulnerability_id": "VCID-w9ca-exua-g7ar", "summary": "Improper Access Control\nTeachers in a quiz group could modify group overrides for other groups in the same quiz.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10188", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36116", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36022", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10188" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10188", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10188" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388569", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388569" }, { "reference_url": "http://www.securityfocus.com/bid/109178", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/109178" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10188", "reference_id": "CVE-2019-10188", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10188" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10188", "GHSA-92q5-2h76-vgmj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w9ca-exua-g7ar" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51699?format=api", "vulnerability_id": "VCID-x7rg-rsb5-pya7", "summary": "Improper Access Control\nUsers with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10187", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36116", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36022", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10187" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10187", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10187" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388568#p1566330", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388568#p1566330" }, { "reference_url": "http://www.securityfocus.com/bid/109174", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/109174" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10187", "reference_id": "CVE-2019-10187", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10187" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10187", "GHSA-2mg9-hv69-897x" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x7rg-rsb5-pya7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38036?format=api", "vulnerability_id": "VCID-xmm4-zw49-3feh", "summary": "Information Exposure\nThe (1) `core_enrol_get_course_enrolment_methods` and (2) `enrol_self_get_instance_info` web services in Moodle do not consider the `moodle/course:viewhiddencourses` capability, which allows remote authenticated users to obtain sensitive information via a web-service request.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0724", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.69204", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.69243", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0724" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/4323a973d57a41e19e039a850ad71ebcabae73c1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4323a973d57a41e19e039a850ad71ebcabae73c1" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=326205", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=326205" }, { "reference_url": "https://web.archive.org/web/20210622172957/http://www.securitytracker.com/id/1034694", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210622172957/http://www.securitytracker.com/id/1034694" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/01/18/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/01/18/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0724", "reference_id": "CVE-2016-0724", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0724" }, { "reference_url": "https://github.com/advisories/GHSA-hjrj-7wcj-7j3c", "reference_id": "GHSA-hjrj-7wcj-7j3c", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hjrj-7wcj-7j3c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52562?format=api", "purl": "pkg:composer/moodle/moodle@2.7.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/52556?format=api", "purl": "pkg:composer/moodle/moodle@2.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/52557?format=api", "purl": "pkg:composer/moodle/moodle@2.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/52558?format=api", "purl": "pkg:composer/moodle/moodle@3.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.2" } ], "aliases": [ "CVE-2016-0724", "GHSA-hjrj-7wcj-7j3c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xmm4-zw49-3feh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52234?format=api", "vulnerability_id": "VCID-y8up-cqtu-jkdw", "summary": "Cross-site Scripting\nPersistent XSS in `/course/modedit.php` of Moodle allows authenticated users (Teacher) to inject JavaScript into the session of another user (e.g., enrolled student or site administrator) via the `introeditor[text]` parameter.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-18210", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0044", "scoring_system": "epss", "scoring_elements": "0.63526", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0044", "scoring_system": "epss", "scoring_elements": "0.63483", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-18210" }, { "reference_url": "https://docs.moodle.org/38/en/Teacher_role", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.moodle.org/38/en/Teacher_role" }, { "reference_url": "https://gist.github.com/Danbardo/4a6b0fe8cb21ec6d7c54e6ac951bdb0a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://gist.github.com/Danbardo/4a6b0fe8cb21ec6d7c54e6ac951bdb0a" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18210", "reference_id": "CVE-2019-18210", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18210" }, { "reference_url": "https://github.com/advisories/GHSA-q6vw-27c6-jv9c", "reference_id": "GHSA-q6vw-27c6-jv9c", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q6vw-27c6-jv9c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76647?format=api", "purl": "pkg:composer/moodle/moodle@3.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.3" } ], "aliases": [ "CVE-2019-18210", "GHSA-q6vw-27c6-jv9c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y8up-cqtu-jkdw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39329?format=api", "vulnerability_id": "VCID-yghg-775s-vber", "summary": "Server-Side Request Forgery (SSRF)\nMoodle has Server Side Request Forgery in the `filepicker`.", "references": [ { "reference_url": "http://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1042", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12866", "scoring_system": "epss", "scoring_elements": "0.94175", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12866", "scoring_system": "epss", "scoring_elements": "0.94183", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1042" }, { "reference_url": "https://github.com/moodle/moodle/commit/f1d1a60e0ac8549c08e66062f3cd0110e4a92e24", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f1d1a60e0ac8549c08e66062f3cd0110e4a92e24" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=364381", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=364381" }, { "reference_url": "https://web.archive.org/web/20210124134113/http://www.securityfocus.com/bid/102752", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210124134113/http://www.securityfocus.com/bid/102752" }, { "reference_url": "http://www.securityfocus.com/bid/102752", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/102752" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/47177.txt", "reference_id": "CVE-2018-1042", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/47177.txt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1042", "reference_id": "CVE-2018-1042", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1042" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54885?format=api", "purl": "pkg:composer/moodle/moodle@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/54886?format=api", "purl": "pkg:composer/moodle/moodle@3.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/moodle/moodle@3.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/54896?format=api", "purl": "pkg:composer/moodle/moodle@3.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1" } ], "aliases": [ "CVE-2018-1042", "GHSA-qqjv-mc2v-p7mc" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yghg-775s-vber" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40843?format=api", "vulnerability_id": "VCID-zjrq-np3y-hua5", "summary": "Information Exposure\nPermissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar events.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3848", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32446", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32374", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3848" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384011#p1547743", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384011#p1547743" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3848", "reference_id": "CVE-2019-3848", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3848" }, { "reference_url": "https://github.com/advisories/GHSA-45rw-4r25-jvg7", "reference_id": "GHSA-45rw-4r25-jvg7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-45rw-4r25-jvg7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3848", "GHSA-45rw-4r25-jvg7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zjrq-np3y-hua5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54002?format=api", "vulnerability_id": "VCID-zwkk-zazw-6fgg", "summary": "Improper Validation of Integrity Check Value\nIt was found in Moodle that a insufficient capability checks in some grade related web services meant students were able to view other students grades.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20184", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.34896", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20184" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417167", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417167" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20184", "reference_id": "CVE-2021-20184", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20184" }, { "reference_url": "https://github.com/advisories/GHSA-mm73-86f9-5x5c", "reference_id": "GHSA-mm73-86f9-5x5c", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mm73-86f9-5x5c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79638?format=api", "purl": "pkg:composer/moodle/moodle@3.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/79639?format=api", "purl": "pkg:composer/moodle/moodle@3.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" } ], "aliases": [ "CVE-2021-20184", "GHSA-mm73-86f9-5x5c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zwkk-zazw-6fgg" } ], "fixing_vulnerabilities": [], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.0" }