Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/62209?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "type": "composer", "namespace": "moodle", "name": "moodle", "version": "2.4.11", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.5.17", "latest_non_vulnerable_version": "5.1.2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51695?format=api", "vulnerability_id": "VCID-2s6b-tp6p-gue1", "summary": "Cross-Site Request Forgery (CSRF)\nA sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10186", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00371", "scoring_system": "epss", "scoring_elements": "0.59199", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10186" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10186", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10186" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/ea1ac3c7efbddbdb210ea4c75e7156c7d7ee914b", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ea1ac3c7efbddbdb210ea4c75e7156c7d7ee914b" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388567#p1566329", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388567#p1566329" }, { "reference_url": "https://web.archive.org/web/20210125055044/https://www.securityfocus.com/bid/109175", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210125055044/https://www.securityfocus.com/bid/109175" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10186", "reference_id": "CVE-2019-10186", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10186" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10186", "GHSA-wv9c-pfpm-4wc5" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2s6b-tp6p-gue1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38122?format=api", "vulnerability_id": "VCID-37pj-u3gh-n7fd", "summary": "Insertion of Sensitive Information into Log File\nMoodle does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2190", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00437", "scoring_system": "epss", "scoring_elements": "0.63393", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2190" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1688564a6eee6000013f6e185f704049283ae375", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1688564a6eee6000013f6e185f704049283ae375" }, { "reference_url": "https://github.com/moodle/moodle/commit/190757854d9ce3b3ce3100dc76de54277f3bdd14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/190757854d9ce3b3ce3100dc76de54277f3bdd14" }, { "reference_url": "https://github.com/moodle/moodle/commit/314d105c169c67e3ce750f76b21d99983d4a9ff5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/314d105c169c67e3ce750f76b21d99983d4a9ff5" }, { "reference_url": "https://github.com/moodle/moodle/commit/4d6f159f681882496e05ddacf2561929d2d23f0e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4d6f159f681882496e05ddacf2561929d2d23f0e" }, { "reference_url": "https://github.com/moodle/moodle/commit/9f91c23536a31ba2dc91b0ba2ae726b1757a20cb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9f91c23536a31ba2dc91b0ba2ae726b1757a20cb" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330181", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330181" }, { "reference_url": "https://web.archive.org/web/20210801130148/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210801130148/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2190", "reference_id": "CVE-2016-2190", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2190" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2190", "GHSA-r9pc-g29w-f86j" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-37pj-u3gh-n7fd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38453?format=api", "vulnerability_id": "VCID-65y9-9ur2-pugc", "summary": "Improper Input Validation\nThere is incorrect sanitization of attributes in forums.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-2576", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00289", "scoring_system": "epss", "scoring_elements": "0.5258", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-2576" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=345912", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=345912" }, { "reference_url": "http://www.securityfocus.com/bid/95649", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/95649" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2576", "reference_id": "CVE-2017-2576", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2576" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53208?format=api", "purl": "pkg:composer/moodle/moodle@2.7.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/206034?format=api", "purl": "pkg:composer/moodle/moodle@2.9.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/206037?format=api", "purl": "pkg:composer/moodle/moodle@3.0.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/53209?format=api", "purl": "pkg:composer/moodle/moodle@3.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/53201?format=api", "purl": "pkg:composer/moodle/moodle@3.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/53202?format=api", "purl": "pkg:composer/moodle/moodle@3.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2qjr-wjh1-8fh6" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nc2j-pay7-ryab" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.1" } ], "aliases": [ "CVE-2017-2576", "GHSA-cjrf-xg77-chpw" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-65y9-9ur2-pugc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39173?format=api", "vulnerability_id": "VCID-83kb-4mk9-t7ge", "summary": "Information Exposure\nStudents can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15110", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00237", "scoring_system": "epss", "scoring_elements": "0.46726", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15110" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=361784", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=361784" }, { "reference_url": "http://www.securityfocus.com/bid/101909", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/101909" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15110", "reference_id": "CVE-2017-15110", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15110" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/54108?format=api", "purl": "pkg:composer/moodle/moodle@3.1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/54109?format=api", "purl": "pkg:composer/moodle/moodle@3.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nc2j-pay7-ryab" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/54110?format=api", "purl": "pkg:composer/moodle/moodle@3.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nc2j-pay7-ryab" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.3" } ], "aliases": [ "CVE-2017-15110", "GHSA-rjh8-w8jg-xwq5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-83kb-4mk9-t7ge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52271?format=api", "vulnerability_id": "VCID-a6pb-47tu-afcg", "summary": "Information Exposure\nMoodle is vulnerable to information exposure of service tokens for users enrolled in the same course.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1692", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00159", "scoring_system": "epss", "scoring_elements": "0.36547", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1692" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1692", "reference_id": "CVE-2020-1692", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1692" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76646?format=api", "purl": "pkg:composer/moodle/moodle@3.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.2" } ], "aliases": [ "CVE-2020-1692", "GHSA-9328-7pcw-vw69" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a6pb-47tu-afcg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39322?format=api", "vulnerability_id": "VCID-ajkr-fxa1-mkhk", "summary": "Cross-site Scripting\nMoodle is vulnerable to XSS via a calendar event name.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1045", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00237", "scoring_system": "epss", "scoring_elements": "0.46987", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1045" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=364384", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=364384" }, { "reference_url": "https://web.archive.org/web/20210124134120/http://www.securityfocus.com/bid/102755", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210124134120/http://www.securityfocus.com/bid/102755" }, { "reference_url": "http://www.securityfocus.com/bid/102755", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/102755" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1045", "reference_id": "CVE-2018-1045", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1045" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54885?format=api", "purl": "pkg:composer/moodle/moodle@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/54886?format=api", "purl": "pkg:composer/moodle/moodle@3.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/moodle/moodle@3.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4" } ], "aliases": [ "CVE-2018-1045", "GHSA-595j-wpfg-23w4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ajkr-fxa1-mkhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38123?format=api", "vulnerability_id": "VCID-an53-nu91-k3d7", "summary": "Cross-site Scripting\nMultiple cross-site scripting (XSS) vulnerabilities in `auth/db/auth.php` in Moodle allow remote attackers to inject arbitrary web script or HTML via an external DB profile field.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2152", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.44992", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2152" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3b214760fb51ae2b0c85bbb2b272b9bc7c164657", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3b214760fb51ae2b0c85bbb2b272b9bc7c164657" }, { "reference_url": "https://github.com/moodle/moodle/commit/4db8407d3eaba17a8d3f81957b8e93e9f2554055", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4db8407d3eaba17a8d3f81957b8e93e9f2554055" }, { "reference_url": "https://github.com/moodle/moodle/commit/4ee7394c8bfa95a63428385b542c2066cd2d8ea1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4ee7394c8bfa95a63428385b542c2066cd2d8ea1" }, { "reference_url": "https://github.com/moodle/moodle/commit/54d6ee8c0874d72705ffa4c7c17d7c90bc16c897", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/54d6ee8c0874d72705ffa4c7c17d7c90bc16c897" }, { "reference_url": "https://github.com/moodle/moodle/commit/61da84e4148aa1de83a6389eb77abf3bbf09a349", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/61da84e4148aa1de83a6389eb77abf3bbf09a349" }, { "reference_url": "https://github.com/moodle/moodle/commit/82d0c0b5218e9ceb35a4e24b4a4e1e2e9cfc840c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/82d0c0b5218e9ceb35a4e24b4a4e1e2e9cfc840c" }, { "reference_url": "https://github.com/moodle/moodle/commit/ce597604763272396e5cb8ec93859a8568020b8b", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ce597604763272396e5cb8ec93859a8568020b8b" }, { "reference_url": "https://github.com/moodle/moodle/commit/d9d8e9c3fe92c5f25e319a38fe5617088965ad20", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d9d8e9c3fe92c5f25e319a38fe5617088965ad20" }, { "reference_url": "https://github.com/moodle/moodle/commit/f4fcb1c4f76488d4571d3d265efce3813676c45d", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f4fcb1c4f76488d4571d3d265efce3813676c45d" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330174", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330174" }, { "reference_url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2152", "reference_id": "CVE-2016-2152", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2152" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2152", "GHSA-6mxm-wpqv-675h" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-an53-nu91-k3d7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40471?format=api", "vulnerability_id": "VCID-bjnq-q2nd-1khp", "summary": "Cross-Site Request Forgery (CSRF)\nThe login form is not protected by a token to prevent login cross-site request forgery.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16854", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01178", "scoring_system": "epss", "scoring_elements": "0.79076", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16854" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16854", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16854" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=378731", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=378731" }, { "reference_url": "http://www.securityfocus.com/bid/106017", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/106017" }, { "reference_url": "http://www.securitytracker.com/id/1042154", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1042154" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16854", "reference_id": "CVE-2018-16854", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16854" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/57083?format=api", "purl": "pkg:composer/moodle/moodle@3.1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/57084?format=api", "purl": "pkg:composer/moodle/moodle@3.3.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/57085?format=api", "purl": "pkg:composer/moodle/moodle@3.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/57086?format=api", "purl": "pkg:composer/moodle/moodle@3.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.3" } ], "aliases": [ "CVE-2018-16854", "GHSA-xj5f-qv37-r9jc" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bjnq-q2nd-1khp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39325?format=api", "vulnerability_id": "VCID-duna-st9c-mqbk", "summary": "Information Exposure\nIn Moodle, the quiz web services allow students to see quiz results when it is prohibited in the settings.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1044", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.3998", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1044" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=364383", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=364383" }, { "reference_url": "http://www.securityfocus.com/bid/102754", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/102754" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1044", "reference_id": "CVE-2018-1044", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1044" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54885?format=api", "purl": "pkg:composer/moodle/moodle@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/54886?format=api", "purl": "pkg:composer/moodle/moodle@3.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/moodle/moodle@3.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/54896?format=api", "purl": "pkg:composer/moodle/moodle@3.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1" } ], "aliases": [ "CVE-2018-1044", "GHSA-332g-xh34-5c96" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-duna-st9c-mqbk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38125?format=api", "vulnerability_id": "VCID-eaqp-7abt-6kg9", "summary": "Improper Access Control\nThe `save_submission` function in `mod/assign/externallib.php` in Moodle allows remote authenticated users to bypass intended due-date restrictions by leveraging the student role for a web-service request.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2159", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0021", "scoring_system": "epss", "scoring_elements": "0.43403", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2159" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0766509ab02353008af62f953f7ebc0f6210411a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0766509ab02353008af62f953f7ebc0f6210411a" }, { "reference_url": "https://github.com/moodle/moodle/commit/3c069c16db62d0e0a64137578e92c22d604dd261", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3c069c16db62d0e0a64137578e92c22d604dd261" }, { "reference_url": "https://github.com/moodle/moodle/commit/711f9468d4e2792afe0f2025ac98c52ee3e4ee71", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/711f9468d4e2792afe0f2025ac98c52ee3e4ee71" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc8421575f35585a7a4fc1c9710dafd1d0483d4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc8421575f35585a7a4fc1c9710dafd1d0483d4e" }, { "reference_url": "https://github.com/moodle/moodle/commit/ea8987644fdbbee291337263598b0c3c7bf27c36", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ea8987644fdbbee291337263598b0c3c7bf27c36" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330182", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330182" }, { "reference_url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2159", "reference_id": "CVE-2016-2159", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2159" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2159", "GHSA-cw72-69wq-f9f2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eaqp-7abt-6kg9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51697?format=api", "vulnerability_id": "VCID-eu27-a3px-87ed", "summary": "Improper Access Control\nTeachers in an assignment group could modify group overrides for other groups in the same assignment.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10189", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36022", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10189" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10189", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10189" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388570", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388570" }, { "reference_url": "http://www.securityfocus.com/bid/109271", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/109271" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10189", "reference_id": "CVE-2019-10189", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10189" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10189", "GHSA-h7xp-7fjp-ghhc" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eu27-a3px-87ed" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38450?format=api", "vulnerability_id": "VCID-fsex-f512-pudv", "summary": "Injection Vulnerability\nIn Moodle, text injection can occur in email headers, potentially leading to outbound spam.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-5013", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00363", "scoring_system": "epss", "scoring_elements": "0.58644", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-5013" }, { "reference_url": "https://github.com/moodle/moodle/commit/ed63718caa48803843a14140d8a27f04aba9c8c4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ed63718caa48803843a14140d8a27f04aba9c8c4" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=336698", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=336698" }, { "reference_url": "https://web.archive.org/web/20210123154543/http://www.securityfocus.com/bid/92040", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210123154543/http://www.securityfocus.com/bid/92040" }, { "reference_url": "http://www.securityfocus.com/bid/92040", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/92040" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5013", "reference_id": "CVE-2016-5013", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5013" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53190?format=api", "purl": "pkg:composer/moodle/moodle@2.7.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/206034?format=api", "purl": "pkg:composer/moodle/moodle@2.9.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/53192?format=api", "purl": "pkg:composer/moodle/moodle@2.9.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/53193?format=api", "purl": "pkg:composer/moodle/moodle@3.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/53189?format=api", "purl": "pkg:composer/moodle/moodle@3.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-e2zc-7ujn-wybu" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.1" } ], "aliases": [ "CVE-2016-5013", "GHSA-2hh3-jmv8-5fmx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fsex-f512-pudv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53998?format=api", "vulnerability_id": "VCID-jcq6-btgz-fkf6", "summary": "Cross-site Scripting\nIt was found in Moodle that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20183", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00455", "scoring_system": "epss", "scoring_elements": "0.64171", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20183" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc9de7b0d487b73c23c221dc0b8b6e01654921f3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc9de7b0d487b73c23c221dc0b8b6e01654921f3" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417166", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417166" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20183", "reference_id": "CVE-2021-20183", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20183" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/152240?format=api", "purl": "pkg:composer/moodle/moodle@4.0.0-beta", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.0.0-beta" } ], "aliases": [ "CVE-2021-20183", "GHSA-xhfx-rm8q-c3xv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jcq6-btgz-fkf6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38249?format=api", "vulnerability_id": "VCID-k1bh-ymgt-e7cd", "summary": "Unrestricted Upload of File with Dangerous Type\nUnrestricted file upload vulnerability in the double extension support in the \"image\" module in Moodle allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9187", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02078", "scoring_system": "epss", "scoring_elements": "0.84283", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9187" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packetstormsecurity.com/files/139466/Moodle-CMS-3.1.2-Cross-Site-Scripting-File-Upload.html" }, { "reference_url": "http://www.securityfocus.com/bid/94191", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/94191" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9187", "reference_id": "CVE-2016-9187", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9187" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52966?format=api", "purl": "pkg:composer/moodle/moodle@3.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-e2zc-7ujn-wybu" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.3" } ], "aliases": [ "CVE-2016-9187", "GHSA-58fm-v4pr-jh8p" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k1bh-ymgt-e7cd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38124?format=api", "vulnerability_id": "VCID-k6pw-51st-b3d2", "summary": "Cross-site Scripting\nCross-site scripting (XSS) vulnerability in the `advanced-search` feature in `mod_data` in Moodle allows remote attackers to inject arbitrary web script or HTML via a crafted field in a URL.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2153", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.44992", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2153" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/87e60e529939c60ef5b07d70c37426d359b2e8a2", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/87e60e529939c60ef5b07d70c37426d359b2e8a2" }, { "reference_url": "https://github.com/moodle/moodle/commit/8f95eac1634b4d84053cef52a03065e620d6adf2", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8f95eac1634b4d84053cef52a03065e620d6adf2" }, { "reference_url": "https://github.com/moodle/moodle/commit/a5fae3b0d21cc85a7ea2d2c2af8c7fc9acf2fd92", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a5fae3b0d21cc85a7ea2d2c2af8c7fc9acf2fd92" }, { "reference_url": "https://github.com/moodle/moodle/commit/de60fc23aeeef5631d5718469124af3257383ead", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/de60fc23aeeef5631d5718469124af3257383ead" }, { "reference_url": "https://github.com/moodle/moodle/commit/ead2dd9c161fcfde04ee1fa602e9101a47c53503", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ead2dd9c161fcfde04ee1fa602e9101a47c53503" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=330175", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=330175" }, { "reference_url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20160424224349/http://www.securitytracker.com/id/1035333" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/03/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/03/21/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2153", "reference_id": "CVE-2016-2153", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2153" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52702?format=api", "purl": "pkg:composer/moodle/moodle@2.7.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/52703?format=api", "purl": "pkg:composer/moodle/moodle@2.8.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52704?format=api", "purl": "pkg:composer/moodle/moodle@2.9.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/52705?format=api", "purl": "pkg:composer/moodle/moodle@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8cc1-hbzm-87bx" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.3" } ], "aliases": [ "CVE-2016-2153", "GHSA-mj85-3hqq-r6r9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k6pw-51st-b3d2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40834?format=api", "vulnerability_id": "VCID-k73h-z6j8-gkgz", "summary": "Information Exposure\nThe `/userpix/` page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64372", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64372" }, { "reference_url": "http://packetstormsecurity.com/files/162399/Moodle-3.6.1-Cross-Site-Scripting.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/162399/Moodle-3.6.1-Cross-Site-Scripting.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3810", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08385", "scoring_system": "epss", "scoring_elements": "0.92457", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3810" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3810", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3810" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=381230#p1536767", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=381230#p1536767" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/49814.txt", "reference_id": "CVE-2019-3810", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/49814.txt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3810", "reference_id": "CVE-2019-3810", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3810" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/57083?format=api", "purl": "pkg:composer/moodle/moodle@3.1.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/57634?format=api", "purl": "pkg:composer/moodle/moodle@3.1.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/57085?format=api", "purl": "pkg:composer/moodle/moodle@3.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/57641?format=api", "purl": "pkg:composer/moodle/moodle@3.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/57086?format=api", "purl": "pkg:composer/moodle/moodle@3.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/57642?format=api", "purl": "pkg:composer/moodle/moodle@3.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/57640?format=api", "purl": "pkg:composer/moodle/moodle@3.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/57643?format=api", "purl": "pkg:composer/moodle/moodle@3.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.2" } ], "aliases": [ "CVE-2019-3810", "GHSA-wm4w-8vc6-2j4h" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k73h-z6j8-gkgz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41134?format=api", "vulnerability_id": "VCID-m3np-aebb-8qaa", "summary": "Improper Access Control\nA web service fetching messages was not restricted to the current user's conversations.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10154", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00236", "scoring_system": "epss", "scoring_elements": "0.4672", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10154" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/2904a7f851da8e66be12f41d55068bf07817fbd6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2904a7f851da8e66be12f41d55068bf07817fbd6" }, { "reference_url": "https://github.com/moodle/moodle/commit/a3d19efab4aff83c07db9f0ad34c8f0e1f29c64c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a3d19efab4aff83c07db9f0ad34c8f0e1f29c64c" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=386521", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=386521" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10154", "reference_id": "CVE-2019-10154", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10154" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58258?format=api", "purl": "pkg:composer/moodle/moodle@3.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.4" } ], "aliases": [ "CVE-2019-10154", "GHSA-ww45-x87c-wgff" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m3np-aebb-8qaa" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39536?format=api", "vulnerability_id": "VCID-m4zv-e3dn-budf", "summary": "Improper Access Control\nUnauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1081", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00927", "scoring_system": "epss", "scoring_elements": "0.76428", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1081" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-61392", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-61392" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=367938", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=367938" }, { "reference_url": "http://www.securityfocus.com/bid/103728", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/103728" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1081", "reference_id": "CVE-2018-1081", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1081" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/55318?format=api", "purl": "pkg:composer/moodle/moodle@3.1.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/55319?format=api", "purl": "pkg:composer/moodle/moodle@3.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/55320?format=api", "purl": "pkg:composer/moodle/moodle@3.3.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/55321?format=api", "purl": "pkg:composer/moodle/moodle@3.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.2" } ], "aliases": [ "CVE-2018-1081", "GHSA-v9xq-vh72-chr4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m4zv-e3dn-budf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53999?format=api", "vulnerability_id": "VCID-mkfz-e1ft-2bcw", "summary": "Code Injection\nIt was found in Moodle that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20187", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00679", "scoring_system": "epss", "scoring_elements": "0.7197", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20187" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417171", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417171" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20187", "reference_id": "CVE-2021-20187", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20187" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79637?format=api", "purl": "pkg:composer/moodle/moodle@3.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/79638?format=api", "purl": "pkg:composer/moodle/moodle@3.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/79639?format=api", "purl": "pkg:composer/moodle/moodle@3.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" } ], "aliases": [ "CVE-2021-20187", "GHSA-2jrm-gww7-wch2" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mkfz-e1ft-2bcw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53996?format=api", "vulnerability_id": "VCID-nntc-dsz1-e3fp", "summary": "Cross-site Scripting\nIt was found in Moodle that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20186", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0053", "scoring_system": "epss", "scoring_elements": "0.67569", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20186" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417170", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417170" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20186", "reference_id": "CVE-2021-20186", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20186" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79637?format=api", "purl": "pkg:composer/moodle/moodle@3.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/79638?format=api", "purl": "pkg:composer/moodle/moodle@3.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/79639?format=api", "purl": "pkg:composer/moodle/moodle@3.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" } ], "aliases": [ "CVE-2021-20186", "GHSA-h8m4-h385-qhqv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nntc-dsz1-e3fp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40841?format=api", "vulnerability_id": "VCID-qhv1-wgpm-7fh6", "summary": "Improper Authorization\nUsers could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3849", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59366", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3849" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/427463a52574e4b3bcbe1c65c49066438770641e", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/427463a52574e4b3bcbe1c65c49066438770641e" }, { "reference_url": "https://github.com/moodle/moodle/commit/430f685834cef190bdf58afabe79e765d596890d", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/430f685834cef190bdf58afabe79e765d596890d" }, { "reference_url": "https://github.com/moodle/moodle/commit/723d1a747555b795ed53a0fad01da455797bb78f", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/723d1a747555b795ed53a0fad01da455797bb78f" }, { "reference_url": "https://github.com/moodle/moodle/commit/898d5d05a0c3ae6795db0241bf3cb5951213d45c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/898d5d05a0c3ae6795db0241bf3cb5951213d45c" }, { "reference_url": "https://github.com/moodle/moodle/commit/b77dcd23d8e39265b5c096f0d947764c02d832c8", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b77dcd23d8e39265b5c096f0d947764c02d832c8" }, { "reference_url": "https://github.com/moodle/moodle/commit/cd3060d941a051931eb2613b25bafb0108665895", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cd3060d941a051931eb2613b25bafb0108665895" }, { "reference_url": "https://github.com/moodle/moodle/commit/fba7dcd90abd45210d782a79c6e25bb3840c7438", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/fba7dcd90abd45210d782a79c6e25bb3840c7438" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384012#p1547744", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384012#p1547744" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3849", "reference_id": "CVE-2019-3849", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3849" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3849", "GHSA-5wg9-5w3f-hxmh" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qhv1-wgpm-7fh6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40842?format=api", "vulnerability_id": "VCID-r6kn-b963-eqge", "summary": "URL Redirection to Untrusted Site (Open Redirect)\nLinks within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3850", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00072", "scoring_system": "epss", "scoring_elements": "0.22031", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3850" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1fc481dd7b09e08e85824c1fe6733b303a36bdce", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1fc481dd7b09e08e85824c1fe6733b303a36bdce" }, { "reference_url": "https://github.com/moodle/moodle/commit/772c908d40a944efd91d897d524b255626d330d4", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/772c908d40a944efd91d897d524b255626d330d4" }, { "reference_url": "https://github.com/moodle/moodle/commit/907b377e51c32ea37feef53e10684b504e103273", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/907b377e51c32ea37feef53e10684b504e103273" }, { "reference_url": "https://github.com/moodle/moodle/commit/d3f2f990dd3c5d4e6073a77154c6423d1c304647", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/d3f2f990dd3c5d4e6073a77154c6423d1c304647" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384013#p1547745", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384013#p1547745" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3850", "reference_id": "CVE-2019-3850", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3850" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57662?format=api", "purl": "pkg:composer/moodle/moodle@3.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3850", "GHSA-3fj7-9j8m-7r8g" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r6kn-b963-eqge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40847?format=api", "vulnerability_id": "VCID-s6uu-335k-yfbc", "summary": "Improper Input Validation\nUsers with the \"login as other users\" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3847", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00867", "scoring_system": "epss", "scoring_elements": "0.75516", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3847" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3847", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3847" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/070f24d006eab6b958eb083530de159b43c538ed", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/070f24d006eab6b958eb083530de159b43c538ed" }, { "reference_url": "https://github.com/moodle/moodle/commit/93dda3bfd3caaaa8d23fe8ede543f27ef774958d", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/93dda3bfd3caaaa8d23fe8ede543f27ef774958d" }, { "reference_url": "https://github.com/moodle/moodle/commit/a37e26d2efe1ca0e4d8d69c611a748af35b33674", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a37e26d2efe1ca0e4d8d69c611a748af35b33674" }, { "reference_url": "https://github.com/moodle/moodle/commit/e836242e1c04cd62d0afa4a790074fd245628e7a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e836242e1c04cd62d0afa4a790074fd245628e7a" }, { "reference_url": "https://github.com/moodle/moodle/commit/ec3b63c772d6448765c68268234cf36c1a91bcac", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ec3b63c772d6448765c68268234cf36c1a91bcac" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384010#p1547742", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384010#p1547742" }, { "reference_url": "https://web.archive.org/web/20200227082922/http://www.securityfocus.com/bid/107489", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227082922/http://www.securityfocus.com/bid/107489" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3847", "reference_id": "CVE-2019-3847", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3847" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57662?format=api", "purl": "pkg:composer/moodle/moodle@3.1.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3847", "GHSA-qrcj-6fjw-3h9h" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s6uu-335k-yfbc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38449?format=api", "vulnerability_id": "VCID-vb67-yux5-ayhf", "summary": "Weak Password Recovery Mechanism for Forgotten Password\nIn Moodle, web service tokens are not invalidated when the user password is changed or forced to be changed.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7038", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00243", "scoring_system": "epss", "scoring_elements": "0.47695", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7038" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=339631", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=339631" }, { "reference_url": "http://www.securityfocus.com/bid/93174", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/93174" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7038", "reference_id": "CVE-2016-7038", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7038" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/53194?format=api", "purl": "pkg:composer/moodle/moodle@2.7.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/206034?format=api", "purl": "pkg:composer/moodle/moodle@2.9.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/53195?format=api", "purl": "pkg:composer/moodle/moodle@2.9.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/53196?format=api", "purl": "pkg:composer/moodle/moodle@3.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/52965?format=api", "purl": "pkg:composer/moodle/moodle@3.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-e2zc-7ujn-wybu" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jn5n-6hg9-tyf7" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-q2fa-jymp-c3bb" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-v54t-5thx-1beu" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x927-nh46-7fdy" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-yp82-zj5g-pbaf" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.2" } ], "aliases": [ "CVE-2016-7038", "GHSA-2phx-w35g-x9vm" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vb67-yux5-ayhf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40246?format=api", "vulnerability_id": "VCID-vfp6-4h8n-bkax", "summary": "Code Injection\nMoodle is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy `drag and drop into text` (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-62880", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-62880" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-14630", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01859", "scoring_system": "epss", "scoring_elements": "0.83401", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-14630" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14630", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14630" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/09cbca8566a388e8f0a1a0cfd86cd0667088ed2c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/09cbca8566a388e8f0a1a0cfd86cd0667088ed2c" }, { "reference_url": "https://github.com/moodle/moodle/commit/be092b730910ad97fff0511e177a097ec1cc4b1c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/be092b730910ad97fff0511e177a097ec1cc4b1c" }, { "reference_url": "https://github.com/moodle/moodle/commit/cb8aefa658cf7ad8f002a480343afb2dea94cc08", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cb8aefa658cf7ad8f002a480343afb2dea94cc08" }, { "reference_url": "https://github.com/moodle/moodle/commit/cfc4393aa689c277a27b9a040ff7dcbdac4e41dd", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cfc4393aa689c277a27b9a040ff7dcbdac4e41dd" }, { "reference_url": "https://github.com/moodle/moodle/commit/da1eeea0ff3d292b7669e478abc114872dd9cc8f", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/da1eeea0ff3d292b7669e478abc114872dd9cc8f" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=376023", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=376023" }, { "reference_url": "https://seclists.org/fulldisclosure/2018/Sep/28", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://seclists.org/fulldisclosure/2018/Sep/28" }, { "reference_url": "https://web.archive.org/web/20200227111301/https://www.securityfocus.com/bid/105354", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227111301/https://www.securityfocus.com/bid/105354" }, { "reference_url": "https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.sec-consult.com/en/blog/advisories/remote-code-execution-php-unserialize-moodle-open-source-learning-platform-cve-2018-14630" }, { "reference_url": "http://www.securityfocus.com/bid/105354", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/105354" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14630", "reference_id": "CVE-2018-14630", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14630" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/206042?format=api", "purl": "pkg:composer/moodle/moodle@3.1.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/56464?format=api", "purl": "pkg:composer/moodle/moodle@3.1.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/56461?format=api", "purl": "pkg:composer/moodle/moodle@3.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/56462?format=api", "purl": "pkg:composer/moodle/moodle@3.4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/56463?format=api", "purl": "pkg:composer/moodle/moodle@3.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-akv3-zfp8-kkc7" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.2" } ], "aliases": [ "CVE-2018-14630", "GHSA-c3pr-h96w-2jjg" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vfp6-4h8n-bkax" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51693?format=api", "vulnerability_id": "VCID-w9ca-exua-g7ar", "summary": "Improper Access Control\nTeachers in a quiz group could modify group overrides for other groups in the same quiz.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10188", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36022", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10188" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10188", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10188" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388569", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388569" }, { "reference_url": "http://www.securityfocus.com/bid/109178", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/109178" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10188", "reference_id": "CVE-2019-10188", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10188" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10188", "GHSA-92q5-2h76-vgmj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w9ca-exua-g7ar" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51699?format=api", "vulnerability_id": "VCID-x7rg-rsb5-pya7", "summary": "Improper Access Control\nUsers with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10187", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00156", "scoring_system": "epss", "scoring_elements": "0.36022", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10187" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10187", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10187" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=388568#p1566330", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=388568#p1566330" }, { "reference_url": "http://www.securityfocus.com/bid/109174", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/109174" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10187", "reference_id": "CVE-2019-10187", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10187" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75819?format=api", "purl": "pkg:composer/moodle/moodle@3.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/75820?format=api", "purl": "pkg:composer/moodle/moodle@3.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/75821?format=api", "purl": "pkg:composer/moodle/moodle@3.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-494p-pmxw-b7e2" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.1" } ], "aliases": [ "CVE-2019-10187", "GHSA-2mg9-hv69-897x" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x7rg-rsb5-pya7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38036?format=api", "vulnerability_id": "VCID-xmm4-zw49-3feh", "summary": "Information Exposure\nThe (1) `core_enrol_get_course_enrolment_methods` and (2) `enrol_self_get_instance_info` web services in Moodle do not consider the `moodle/course:viewhiddencourses` capability, which allows remote authenticated users to obtain sensitive information via a web-service request.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0724", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00578", "scoring_system": "epss", "scoring_elements": "0.69204", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0724" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/4323a973d57a41e19e039a850ad71ebcabae73c1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4323a973d57a41e19e039a850ad71ebcabae73c1" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=326205", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=326205" }, { "reference_url": "https://web.archive.org/web/20210622172957/http://www.securitytracker.com/id/1034694", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210622172957/http://www.securitytracker.com/id/1034694" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/01/18/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/01/18/1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0724", "reference_id": "CVE-2016-0724", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0724" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/203006?format=api", "purl": "pkg:composer/moodle/moodle@2.7.0-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.0-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/52562?format=api", "purl": "pkg:composer/moodle/moodle@2.7.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/52556?format=api", "purl": "pkg:composer/moodle/moodle@2.8.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.8.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/52557?format=api", "purl": "pkg:composer/moodle/moodle@2.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/52558?format=api", "purl": "pkg:composer/moodle/moodle@3.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-9nd7-4wve-97hc" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zgzm-wj81-jkah" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.0.2" } ], "aliases": [ "CVE-2016-0724", "GHSA-hjrj-7wcj-7j3c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xmm4-zw49-3feh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52234?format=api", "vulnerability_id": "VCID-y8up-cqtu-jkdw", "summary": "Cross-site Scripting\nPersistent XSS in `/course/modedit.php` of Moodle allows authenticated users (Teacher) to inject JavaScript into the session of another user (e.g., enrolled student or site administrator) via the `introeditor[text]` parameter.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-18210", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0044", "scoring_system": "epss", "scoring_elements": "0.63483", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-18210" }, { "reference_url": "https://docs.moodle.org/38/en/Teacher_role", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://docs.moodle.org/38/en/Teacher_role" }, { "reference_url": "https://gist.github.com/Danbardo/4a6b0fe8cb21ec6d7c54e6ac951bdb0a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://gist.github.com/Danbardo/4a6b0fe8cb21ec6d7c54e6ac951bdb0a" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18210", "reference_id": "CVE-2019-18210", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18210" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76647?format=api", "purl": "pkg:composer/moodle/moodle@3.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-3uvf-6ztd-xkaf" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-c14d-1sa2-rkf6" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.7.3" } ], "aliases": [ "CVE-2019-18210", "GHSA-q6vw-27c6-jv9c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y8up-cqtu-jkdw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39329?format=api", "vulnerability_id": "VCID-yghg-775s-vber", "summary": "Server-Side Request Forgery (SSRF)\nMoodle has Server Side Request Forgery in the `filepicker`.", "references": [ { "reference_url": "http://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1042", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12866", "scoring_system": "epss", "scoring_elements": "0.94175", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1042" }, { "reference_url": "https://github.com/moodle/moodle/commit/f1d1a60e0ac8549c08e66062f3cd0110e4a92e24", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f1d1a60e0ac8549c08e66062f3cd0110e4a92e24" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=364381", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=364381" }, { "reference_url": "https://web.archive.org/web/20210124134113/http://www.securityfocus.com/bid/102752", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20210124134113/http://www.securityfocus.com/bid/102752" }, { "reference_url": "http://www.securityfocus.com/bid/102752", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/102752" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/47177.txt", "reference_id": "CVE-2018-1042", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/47177.txt" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1042", "reference_id": "CVE-2018-1042", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1042" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54885?format=api", "purl": "pkg:composer/moodle/moodle@3.1.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-9t4u-n1pn-w3bd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/54886?format=api", "purl": "pkg:composer/moodle/moodle@3.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/moodle/moodle@3.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/54896?format=api", "purl": "pkg:composer/moodle/moodle@3.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-336n-hpzg-euhd" }, { "vulnerability": "VCID-4rz2-b4e3-87g5" }, { "vulnerability": "VCID-8mgr-gdzj-4ybs" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-b7br-bh2d-rygp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-ckg1-9vpt-yfdk" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fegs-ubsk-63hu" }, { "vulnerability": "VCID-fygy-9njn-abgd" }, { "vulnerability": "VCID-g8ct-c4ce-zuaf" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mmg3-7fz9-5uak" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-p2gd-7uam-mqf8" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-x9vd-njdz-jua9" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1" } ], "aliases": [ "CVE-2018-1042", "GHSA-qqjv-mc2v-p7mc" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yghg-775s-vber" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40843?format=api", "vulnerability_id": "VCID-zjrq-np3y-hua5", "summary": "Information Exposure\nPermissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar events.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3848", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32374", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-3848" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=384011#p1547743", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=384011#p1547743" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3848", "reference_id": "CVE-2019-3848", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3848" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57658?format=api", "purl": "pkg:composer/moodle/moodle@3.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/57656?format=api", "purl": "pkg:composer/moodle/moodle@3.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-3cb4-wz6x-ckcd" }, { "vulnerability": "VCID-42fa-qbft-rfff" }, { "vulnerability": "VCID-56wj-4124-ryd2" }, { "vulnerability": "VCID-6m19-4krm-2udd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-c1a1-z5m1-nfbc" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fskk-cb95-uqer" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-jcsq-3q5z-4kc6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-mhm4-8kuk-t7b6" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/57657?format=api", "purl": "pkg:composer/moodle/moodle@3.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-deur-8zdf-2kh2" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-hhzz-hbqz-akfw" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-kgva-z9gg-u3dw" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-n5tc-1k33-dfeq" }, { "vulnerability": "VCID-paj4-nq1r-jbd3" }, { "vulnerability": "VCID-qxsq-ku22-r7gx" }, { "vulnerability": "VCID-w2b2-fuky-j3ff" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.6.3" } ], "aliases": [ "CVE-2019-3848", "GHSA-45rw-4r25-jvg7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zjrq-np3y-hua5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54002?format=api", "vulnerability_id": "VCID-zwkk-zazw-6fgg", "summary": "Improper Validation of Integrity Check Value\nIt was found in Moodle that a insufficient capability checks in some grade related web services meant students were able to view other students grades.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20184", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.34896", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-20184" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=417167", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=417167" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20184", "reference_id": "CVE-2021-20184", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20184" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79638?format=api", "purl": "pkg:composer/moodle/moodle@3.8.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.8.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/79639?format=api", "purl": "pkg:composer/moodle/moodle@3.9.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.9.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/65139?format=api", "purl": "pkg:composer/moodle/moodle@3.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbj9-hpz3-xqhh" }, { "vulnerability": "VCID-bu6d-ns3s-fuck" }, { "vulnerability": "VCID-dpd2-1sqc-qqfy" }, { "vulnerability": "VCID-gnez-ehgq-rfbr" }, { "vulnerability": "VCID-mqde-66zm-qbbj" }, { "vulnerability": "VCID-pgfa-bkaw-q7cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1" } ], "aliases": [ "CVE-2021-20184", "GHSA-mm73-86f9-5x5c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zwkk-zazw-6fgg" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43548?format=api", "vulnerability_id": "VCID-1ehh-qz6c-ykhp", "summary": "Moodle allows attackers to obtain username and course information\nMoodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45760", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45760" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3546", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51911", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3546" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/2ca9e09dab3ff374e1026780b23c63751f4ee312", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2ca9e09dab3ff374e1026780b23c63751f4ee312" }, { "reference_url": "https://github.com/moodle/moodle/commit/74556525de9617c593c3e08269d6d541c6576c90", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/74556525de9617c593c3e08269d6d541c6576c90" }, { "reference_url": "https://github.com/moodle/moodle/commit/8f7d596058a18c60b795b4677b59cf074c56de39", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8f7d596058a18c60b795b4677b59cf074c56de39" }, { "reference_url": "https://github.com/moodle/moodle/commit/9dbf62d23017a91fcbf63bba7f2eb4835f77b8c9", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/9dbf62d23017a91fcbf63bba7f2eb4835f77b8c9" }, { "reference_url": "https://github.com/moodle/moodle/commit/dc97145785b9ae192168659c65309bca61a58151", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/dc97145785b9ae192168659c65309bca61a58151" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264267", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264267" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3546", "reference_id": "CVE-2014-3546", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3546" }, { "reference_url": "https://github.com/advisories/GHSA-4c5g-w3gf-rf4f", "reference_id": "GHSA-4c5g-w3gf-rf4f", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-4c5g-w3gf-rf4f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3546", "GHSA-4c5g-w3gf-rf4f" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1ehh-qz6c-ykhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43463?format=api", "vulnerability_id": "VCID-ea5s-xphb-6ub7", "summary": "Exposure of Sensitive Information to an Unauthorized Actor\nmod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45463", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45463" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3542", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00427", "scoring_system": "epss", "scoring_elements": "0.62749", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3542" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/78ed99ec7e5e75b283e844adb058140d6ba0ff14", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/78ed99ec7e5e75b283e844adb058140d6ba0ff14" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264263", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264263" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3542", "reference_id": "CVE-2014-3542", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3542" }, { "reference_url": "https://github.com/advisories/GHSA-xmwv-mqh8-4xgw", "reference_id": "GHSA-xmwv-mqh8-4xgw", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-xmwv-mqh8-4xgw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3542", "GHSA-xmwv-mqh8-4xgw" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ea5s-xphb-6ub7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43392?format=api", "vulnerability_id": "VCID-h8xn-n98n-qqdv", "summary": "Exposure of Sensitive Information to an Unauthorized Actor\nmod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.", "references": [ { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3543", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00427", "scoring_system": "epss", "scoring_elements": "0.62749", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3543" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/595ef4772d330a20c757635ab090acdcc9b2a2fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/595ef4772d330a20c757635ab090acdcc9b2a2fa" }, { "reference_url": "https://git.moodle.org/gw?p=moodle.git;a=commit;h=595ef4772d330a20c757635ab090acdcc9b2a2fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.moodle.org/gw?p=moodle.git;a=commit;h=595ef4772d330a20c757635ab090acdcc9b2a2fa" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264264", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264264" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3543", "reference_id": "CVE-2014-3543", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3543" }, { "reference_url": "https://github.com/advisories/GHSA-27j2-c838-c3qg", "reference_id": "GHSA-27j2-c838-c3qg", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-27j2-c838-c3qg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3543", "GHSA-27j2-c838-c3qg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h8xn-n98n-qqdv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43779?format=api", "vulnerability_id": "VCID-qxyw-7hnt-hqd6", "summary": "Improper Control of Generation of Code ('Code Injection')\nMoodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46148", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46148" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3545", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01284", "scoring_system": "epss", "scoring_elements": "0.79954", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3545" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/blob/1474f74687dda57c7d011b92d16f25b9870d2799/question/type/calculated/question.php#L426", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/blob/1474f74687dda57c7d011b92d16f25b9870d2799/question/type/calculated/question.php#L426" }, { "reference_url": "https://github.com/moodle/moodle/commit/155bc7547227dc2047cfc8630cbfe121888b359b", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/155bc7547227dc2047cfc8630cbfe121888b359b" }, { "reference_url": "https://github.com/moodle/moodle/commit/29005a5418894b76e62e44bbc2c9e4ddee8f5ce6", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/29005a5418894b76e62e44bbc2c9e4ddee8f5ce6" }, { "reference_url": "https://github.com/moodle/moodle/commit/44f726a7b1d351b39bb2a6a30c1b30027fabd000", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/44f726a7b1d351b39bb2a6a30c1b30027fabd000" }, { "reference_url": "https://github.com/moodle/moodle/commit/539a25ff03fae377758d62caefcc71a2418e9a84", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/539a25ff03fae377758d62caefcc71a2418e9a84" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c6c172033e3fb4afce862f8b32b459f5c35ad19", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c6c172033e3fb4afce862f8b32b459f5c35ad19" }, { "reference_url": "https://github.com/moodle/moodle/commit/66de66fe6a8ce8f491562edad0a14f26d4808cb4", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/66de66fe6a8ce8f491562edad0a14f26d4808cb4" }, { "reference_url": "https://github.com/moodle/moodle/commit/770d3ce42669067eca2bcee22d142ed7fec08550", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/770d3ce42669067eca2bcee22d142ed7fec08550" }, { "reference_url": "https://github.com/moodle/moodle/commit/82b3260eab2db58dfa9510645fd2c60ee0ce142e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/82b3260eab2db58dfa9510645fd2c60ee0ce142e" }, { "reference_url": "https://github.com/moodle/moodle/commit/88ec9f308da6a4bc7a735458cdf72648357d501d", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/88ec9f308da6a4bc7a735458cdf72648357d501d" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264266", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264266" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3545", "reference_id": "CVE-2014-3545", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3545" }, { "reference_url": "https://github.com/advisories/GHSA-3m99-h3hp-w9j7", "reference_id": "GHSA-3m99-h3hp-w9j7", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-3m99-h3hp-w9j7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3545", "GHSA-3m99-h3hp-w9j7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qxyw-7hnt-hqd6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43446?format=api", "vulnerability_id": "VCID-r88h-mteg-yka9", "summary": "Improper Control of Generation of Code ('Code Injection')\nThe Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45616", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45616" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3541", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01935", "scoring_system": "epss", "scoring_elements": "0.83734", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3541" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3fe105953d14766393e24372806fcf0a2b77c96d", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3fe105953d14766393e24372806fcf0a2b77c96d" }, { "reference_url": "https://github.com/moodle/moodle/commit/40d52d4067c2ee062a5b16c780753c6f97413894", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/40d52d4067c2ee062a5b16c780753c6f97413894" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c4ef26c39d3106315f74c26cdcca779ba74254c", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c4ef26c39d3106315f74c26cdcca779ba74254c" }, { "reference_url": "https://github.com/moodle/moodle/commit/61961447c29d48e5a494e7c02e653d6ff00551b2", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/61961447c29d48e5a494e7c02e653d6ff00551b2" }, { "reference_url": "https://github.com/moodle/moodle/commit/68170f0b01ccaade799c4cab2312ce6a825fb844", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/68170f0b01ccaade799c4cab2312ce6a825fb844" }, { "reference_url": "https://github.com/moodle/moodle/commit/7bcf9b1e2cbdd1e877b828da75b17e3f8318fafc", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7bcf9b1e2cbdd1e877b828da75b17e3f8318fafc" }, { "reference_url": "https://github.com/moodle/moodle/commit/867f40990bde6152e01604d106ddac8433018f42", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/867f40990bde6152e01604d106ddac8433018f42" }, { "reference_url": "https://github.com/moodle/moodle/commit/cb2b42aed8d9ce3c9840ad825f2e0e7e81bfad91", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/cb2b42aed8d9ce3c9840ad825f2e0e7e81bfad91" }, { "reference_url": "https://github.com/moodle/moodle/commit/e29bb97c0756de511ba287b40790d8275a991d33", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e29bb97c0756de511ba287b40790d8275a991d33" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264262", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3541", "reference_id": "CVE-2014-3541", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3541" }, { "reference_url": "https://github.com/advisories/GHSA-fccf-p8fx-vjj4", "reference_id": "GHSA-fccf-p8fx-vjj4", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-fccf-p8fx-vjj4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3541", "GHSA-fccf-p8fx-vjj4" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r88h-mteg-yka9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43448?format=api", "vulnerability_id": "VCID-s5cy-eva4-wbaf", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46223", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-46223" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3551", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00251", "scoring_system": "epss", "scoring_elements": "0.48589", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3551" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/1f8eb0842835bcd1ea72b2d2982e0b5c8bc133bb", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/1f8eb0842835bcd1ea72b2d2982e0b5c8bc133bb" }, { "reference_url": "https://github.com/moodle/moodle/commit/2c0b608cda12540de79aac0ee6952dda2c8ed947", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/2c0b608cda12540de79aac0ee6952dda2c8ed947" }, { "reference_url": "https://github.com/moodle/moodle/commit/470a466d7f1e0aef030ad2178bbef5a81765c42e", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/470a466d7f1e0aef030ad2178bbef5a81765c42e" }, { "reference_url": "https://github.com/moodle/moodle/commit/4fc5861cbacdc2f4197faebd3d207d2811e0f09f", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4fc5861cbacdc2f4197faebd3d207d2811e0f09f" }, { "reference_url": "https://github.com/moodle/moodle/commit/555ee08b17dfe09e02391be137f60fe38c0a7865", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/555ee08b17dfe09e02391be137f60fe38c0a7865" }, { "reference_url": "https://github.com/moodle/moodle/commit/666248c264642e5ca27601b347fc6913517e2853", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/666248c264642e5ca27601b347fc6913517e2853" }, { "reference_url": "https://github.com/moodle/moodle/commit/68299e6154ae41b7e586904fd1b860cad7f65654", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/68299e6154ae41b7e586904fd1b860cad7f65654" }, { "reference_url": "https://github.com/moodle/moodle/commit/72d1a3ab0b002a9a5f32f3c2b61ffc9fa7f7b789", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/72d1a3ab0b002a9a5f32f3c2b61ffc9fa7f7b789" }, { "reference_url": "https://github.com/moodle/moodle/commit/7f4db6f4d9014370df0265ab846ad76235af0cae", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7f4db6f4d9014370df0265ab846ad76235af0cae" }, { "reference_url": "https://github.com/moodle/moodle/commit/8380722bb11f36d33308580aee169e161d3f2c14", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8380722bb11f36d33308580aee169e161d3f2c14" }, { "reference_url": "https://github.com/moodle/moodle/commit/8ecc049f7f020086c1881bdf573af16cf2d9f9c9", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/8ecc049f7f020086c1881bdf573af16cf2d9f9c9" }, { "reference_url": "https://github.com/moodle/moodle/commit/98d5566c2270e21cbfaf1f4e8d61039f05d6aae2", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/98d5566c2270e21cbfaf1f4e8d61039f05d6aae2" }, { "reference_url": "https://github.com/moodle/moodle/commit/b5dacb548800ee10d4940c8ebeca48c3c2ae0512", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/b5dacb548800ee10d4940c8ebeca48c3c2ae0512" }, { "reference_url": "https://github.com/moodle/moodle/commit/db5a6e6560c963849f8807184ca32efee6779264", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/db5a6e6560c963849f8807184ca32efee6779264" }, { "reference_url": "https://github.com/moodle/moodle/commit/e42b6e20bdd5d6f09bc09be22fd7f20736e27085", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/e42b6e20bdd5d6f09bc09be22fd7f20736e27085" }, { "reference_url": "https://github.com/moodle/moodle/commit/eb1381de1dbcce0215dcdd62cfac4fe287beed4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/eb1381de1dbcce0215dcdd62cfac4fe287beed4e" }, { "reference_url": "https://github.com/moodle/moodle/commit/f25f472be425d6ef8aa587648dafda1bd4d1c5d8", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f25f472be425d6ef8aa587648dafda1bd4d1c5d8" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264273", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264273" }, { "reference_url": "https://web.archive.org/web/20200228170658/http://www.securityfocus.com/bid/68763", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200228170658/http://www.securityfocus.com/bid/68763" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3551", "reference_id": "CVE-2014-3551", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3551" }, { "reference_url": "https://github.com/advisories/GHSA-m8f5-9wg8-2c3h", "reference_id": "GHSA-m8f5-9wg8-2c3h", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-m8f5-9wg8-2c3h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3551", "GHSA-m8f5-9wg8-2c3h" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s5cy-eva4-wbaf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43506?format=api", "vulnerability_id": "VCID-ucg8-htfc-2bhn", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45683", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45683" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss" }, { "reference_url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss/", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss/" }, { "reference_url": "http://osvdb.org/show/osvdb/109337", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://osvdb.org/show/osvdb/109337" }, { "reference_url": "http://packetstormsecurity.com/files/127624/Moodle-2.7-Cross-Site-Scripting.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/127624/Moodle-2.7-Cross-Site-Scripting.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3544", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00818", "scoring_system": "epss", "scoring_elements": "0.74711", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3544" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/0207466e778baebff21c7b72bc688761f9c5b0d9", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/0207466e778baebff21c7b72bc688761f9c5b0d9" }, { "reference_url": "https://github.com/moodle/moodle/commit/739d227c58886e9a1be1426ed66053f1d37ee9a9", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/739d227c58886e9a1be1426ed66053f1d37ee9a9" }, { "reference_url": "https://github.com/moodle/moodle/commit/ce5a785b0962c3c94c7a7b0d36176482d21db95d", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/ce5a785b0962c3c94c7a7b0d36176482d21db95d" }, { "reference_url": "https://github.com/moodle/moodle/commit/f7b6562f20f6af4119c7775477cffbaa83229f74", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/f7b6562f20f6af4119c7775477cffbaa83229f74" }, { "reference_url": "http://www.exploit-db.com/exploits/34169", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.exploit-db.com/exploits/34169" }, { "reference_url": "http://www.securityfocus.com/bid/68756", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/68756" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3544", "reference_id": "CVE-2014-3544", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3544" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/34169.txt", "reference_id": "CVE-2014-3544;OSVDB-109337", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/34169.txt" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264265", "reference_id": "CVE-2014-3544;OSVDB-109337", "reference_type": "exploit", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264265" }, { "reference_url": "https://github.com/advisories/GHSA-c9jp-244j-vh78", "reference_id": "GHSA-c9jp-244j-vh78", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-c9jp-244j-vh78" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3544", "GHSA-c9jp-244j-vh78" ], "risk_score": 5.4, "exploitability": "2.0", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ucg8-htfc-2bhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43785?format=api", "vulnerability_id": "VCID-vs2j-b4qg-nbgu", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nMultiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45471", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45471" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/07/21/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/07/21/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3548", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00256", "scoring_system": "epss", "scoring_elements": "0.49148", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3548" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/166e18d7cbb36d58d08a2783edd98284d5a3b98a", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/166e18d7cbb36d58d08a2783edd98284d5a3b98a" }, { "reference_url": "https://github.com/moodle/moodle/commit/53ca351f7af8d80a0ff0aba27a1c278fb731d288", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/53ca351f7af8d80a0ff0aba27a1c278fb731d288" }, { "reference_url": "https://github.com/moodle/moodle/commit/6eb787b873f5d3718dc8a74f798ee528d600d8fe", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/6eb787b873f5d3718dc8a74f798ee528d600d8fe" }, { "reference_url": "https://github.com/moodle/moodle/commit/a1ae35173b54ed0c2c3736dfa78cad9899a55d4e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/a1ae35173b54ed0c2c3736dfa78cad9899a55d4e" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=264270", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=264270" }, { "reference_url": "https://web.archive.org/web/20200228161543/http://www.securityfocus.com/bid/68766", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200228161543/http://www.securityfocus.com/bid/68766" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3548", "reference_id": "CVE-2014-3548", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3548" }, { "reference_url": "https://github.com/advisories/GHSA-f66h-6mj2-rwj2", "reference_id": "GHSA-f66h-6mj2-rwj2", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-f66h-6mj2-rwj2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62209?format=api", "purl": "pkg:composer/moodle/moodle@2.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/62059?format=api", "purl": "pkg:composer/moodle/moodle@2.5.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62060?format=api", "purl": "pkg:composer/moodle/moodle@2.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62061?format=api", "purl": "pkg:composer/moodle/moodle@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2dxb-v1af-jbax" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4kq5-ctsv-eka8" }, { "vulnerability": "VCID-5rbf-4dz3-2qdz" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-dhku-uah4-ykh8" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-kgvw-uxf4-wbc1" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s3ue-e5h8-f3dy" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vtq4-fpr8-hudb" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.7.1" } ], "aliases": [ "CVE-2014-3548", "GHSA-f66h-6mj2-rwj2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vs2j-b4qg-nbgu" } ], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.11" }