Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/moodle/moodle@3.10.0-beta
Typecomposer
Namespacemoodle
Namemoodle
Version3.10.0-beta
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.5.9
Latest_non_vulnerable_version5.1.2
Affected_by_vulnerabilities
0
url VCID-17k8-g4xw-b7g9
vulnerability_id VCID-17k8-g4xw-b7g9
summary 
Moodle allows IDOR when accessing the cohorts report
A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3647
reference_id
reference_type
scores
0
value 0.00096
scoring_system epss
scoring_elements 0.26664
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3647
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359762
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359762
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/bd6ec0ac84cf0f73ab35e7e244e1f9b06929083a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bd6ec0ac84cf0f73ab35e7e244e1f9b06929083a
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467607
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/
url https://moodle.org/mod/forum/discuss.php?d=467607
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3647
reference_id CVE-2025-3647
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:45Z/
url https://access.redhat.com/security/cve/CVE-2025-3647
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3647
reference_id CVE-2025-3647
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3647
7
reference_url https://github.com/advisories/GHSA-34g7-pg9j-pxgp
reference_id GHSA-34g7-pg9j-pxgp
reference_type
scores
url https://github.com/advisories/GHSA-34g7-pg9j-pxgp
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3647, GHSA-34g7-pg9j-pxgp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-17k8-g4xw-b7g9
1
url VCID-1efm-18zh-w7gm
vulnerability_id VCID-1efm-18zh-w7gm
summary Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62400
reference_id
reference_type
scores
0
value 0.00059
scoring_system epss
scoring_elements 0.18843
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62400
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404433
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404433
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470389
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470389
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62400
reference_id CVE-2025-62400
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/
url https://access.redhat.com/security/cve/CVE-2025-62400
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62400
reference_id CVE-2025-62400
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62400
7
reference_url https://github.com/advisories/GHSA-422v-w6c5-vq42
reference_id GHSA-422v-w6c5-vq42
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-422v-w6c5-vq42
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.21
purl pkg:composer/moodle/moodle@4.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.21
1
url pkg:composer/moodle/moodle@4.4.11
purl pkg:composer/moodle/moodle@4.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11
2
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
3
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62400, GHSA-422v-w6c5-vq42
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1efm-18zh-w7gm
2
url VCID-1wup-hjxg-f7g4
vulnerability_id VCID-1wup-hjxg-f7g4
summary 
Moodle shows hidden grades to users without permission on some grade reports
A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81945
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32045
reference_id
reference_type
scores
0
value 0.00154
scoring_system epss
scoring_elements 0.35919
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32045
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2356835
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:20Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2356835
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467086
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467086
5
reference_url https://access.redhat.com/security/cve/CVE-2025-32045
reference_id CVE-2025-32045
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:37:20Z/
url https://access.redhat.com/security/cve/CVE-2025-32045
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-32045
reference_id CVE-2025-32045
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-32045
7
reference_url https://github.com/advisories/GHSA-8m7c-hm88-2p97
reference_id GHSA-8m7c-hm88-2p97
reference_type
scores
url https://github.com/advisories/GHSA-8m7c-hm88-2p97
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.17
purl pkg:composer/moodle/moodle@4.1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-29mv-feyq-guew
3
vulnerability VCID-3yre-ft3n-2fd3
4
vulnerability VCID-44zf-1dw7-qkf5
5
vulnerability VCID-4zvp-nmrk-4qbq
6
vulnerability VCID-5snb-dyv3-efe9
7
vulnerability VCID-5xhb-mx3v-fuhs
8
vulnerability VCID-61ry-zz34-8qhj
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-7trf-g8dq-tua1
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-f1da-1duc-2uhb
13
vulnerability VCID-ffp4-23na-rkgr
14
vulnerability VCID-hufb-p6pa-63c9
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-ueyy-v42v-7ydh
18
vulnerability VCID-vve8-f9s9-v7ft
19
vulnerability VCID-wby4-h9ud-1yh5
20
vulnerability VCID-wwx4-ns21-k3hd
21
vulnerability VCID-wytb-bryq-yqb4
22
vulnerability VCID-yby1-g45r-rugg
23
vulnerability VCID-ykj6-ptd4-7qfs
24
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.17
1
url pkg:composer/moodle/moodle@4.3.11
purl pkg:composer/moodle/moodle@4.3.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-29mv-feyq-guew
3
vulnerability VCID-3yre-ft3n-2fd3
4
vulnerability VCID-657g-68tv-dkam
5
vulnerability VCID-7trf-g8dq-tua1
6
vulnerability VCID-dky9-v96e-pubh
7
vulnerability VCID-ffp4-23na-rkgr
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-m2a7-q28u-1yfw
10
vulnerability VCID-rcr9-z41f-sqbr
11
vulnerability VCID-ueyy-v42v-7ydh
12
vulnerability VCID-vve8-f9s9-v7ft
13
vulnerability VCID-wwx4-ns21-k3hd
14
vulnerability VCID-wytb-bryq-yqb4
15
vulnerability VCID-xqha-pgc4-3udb
16
vulnerability VCID-ykj6-ptd4-7qfs
17
vulnerability VCID-z693-m8fg-63cc
18
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.11
2
url pkg:composer/moodle/moodle@4.4.7
purl pkg:composer/moodle/moodle@4.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-29mv-feyq-guew
3
vulnerability VCID-3yre-ft3n-2fd3
4
vulnerability VCID-44zf-1dw7-qkf5
5
vulnerability VCID-4zvp-nmrk-4qbq
6
vulnerability VCID-5snb-dyv3-efe9
7
vulnerability VCID-5xhb-mx3v-fuhs
8
vulnerability VCID-61ry-zz34-8qhj
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-7trf-g8dq-tua1
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-dr5e-6s1a-6uas
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-xqha-pgc4-3udb
24
vulnerability VCID-yby1-g45r-rugg
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.7
3
url pkg:composer/moodle/moodle@4.5.3
purl pkg:composer/moodle/moodle@4.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-29mv-feyq-guew
3
vulnerability VCID-3m96-nmxm-tfgz
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-ey6g-spfk-7bcw
15
vulnerability VCID-f1da-1duc-2uhb
16
vulnerability VCID-ffp4-23na-rkgr
17
vulnerability VCID-hufb-p6pa-63c9
18
vulnerability VCID-j3ts-5ghc-4qct
19
vulnerability VCID-m2a7-q28u-1yfw
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wby4-h9ud-1yh5
23
vulnerability VCID-wjby-arfq-buby
24
vulnerability VCID-wwx4-ns21-k3hd
25
vulnerability VCID-wytb-bryq-yqb4
26
vulnerability VCID-xqha-pgc4-3udb
27
vulnerability VCID-yby1-g45r-rugg
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z693-m8fg-63cc
30
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.3
aliases CVE-2025-32045, GHSA-8m7c-hm88-2p97
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1wup-hjxg-f7g4
3
url VCID-21mq-pewz-ekdt
vulnerability_id VCID-21mq-pewz-ekdt
summary 
Moodle Cross-site Scripting vulnerability
A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43437
reference_id
reference_type
scores
0
value 0.01529
scoring_system epss
scoring_elements 0.81662
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43437
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304266
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-11T14:28:15Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304266
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461207
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-11T14:28:15Z/
url https://moodle.org/mod/forum/discuss.php?d=461207
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43437
reference_id CVE-2024-43437
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43437
6
reference_url https://github.com/advisories/GHSA-4hjf-6pxr-549h
reference_id GHSA-4hjf-6pxr-549h
reference_type
scores
url https://github.com/advisories/GHSA-4hjf-6pxr-549h
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43437, GHSA-4hjf-6pxr-549h
risk_score 2.5
exploitability 0.5
weighted_severity 4.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-21mq-pewz-ekdt
4
url VCID-29mv-feyq-guew
vulnerability_id VCID-29mv-feyq-guew
summary 
Moodle has a CSRF risk in user tours manager that allows tour duplication
A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3635
reference_id
reference_type
scores
0
value 0.00145
scoring_system epss
scoring_elements 0.3457
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3635
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359709
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:11Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359709
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/dbd723f81c07423d4082d54cd1d90b1b68c44379
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dbd723f81c07423d4082d54cd1d90b1b68c44379
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467597
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467597
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3635
reference_id CVE-2025-3635
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:11Z/
url https://access.redhat.com/security/cve/CVE-2025-3635
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3635
reference_id CVE-2025-3635
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3635
7
reference_url https://github.com/advisories/GHSA-88xj-97gf-7wpq
reference_id GHSA-88xj-97gf-7wpq
reference_type
scores
url https://github.com/advisories/GHSA-88xj-97gf-7wpq
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3635, GHSA-88xj-97gf-7wpq
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-29mv-feyq-guew
5
url VCID-2urf-d2qr-abdy
vulnerability_id VCID-2urf-d2qr-abdy
summary 
Moodle Lesson activity password bypass through PHP loose comparison
A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45691
reference_id
reference_type
scores
0
value 0.00387
scoring_system epss
scoring_elements 0.60204
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45691
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2309940
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:16Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2309940
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/3fc1073d304f660d2552b591c5fb92547ed01e92
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/3fc1073d304f660d2552b591c5fb92547ed01e92
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461897#p1854494
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=461897#p1854494
5
reference_url https://moodle.org/security
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/security
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45691
reference_id CVE-2024-45691
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45691
7
reference_url https://github.com/advisories/GHSA-xfv7-h2qg-rjm7
reference_id GHSA-xfv7-h2qg-rjm7
reference_type
scores
url https://github.com/advisories/GHSA-xfv7-h2qg-rjm7
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.13
purl pkg:composer/moodle/moodle@4.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-mnx8-118d-efcr
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-t8vm-tfnq-5kak
28
vulnerability VCID-ueyy-v42v-7ydh
29
vulnerability VCID-vve8-f9s9-v7ft
30
vulnerability VCID-wby4-h9ud-1yh5
31
vulnerability VCID-wwx4-ns21-k3hd
32
vulnerability VCID-wytb-bryq-yqb4
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z5u9-5522-h7fx
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.13
1
url pkg:composer/moodle/moodle@4.2.10
purl pkg:composer/moodle/moodle@4.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-9xk9-qb9x-jfcs
4
vulnerability VCID-j3ts-5ghc-4qct
5
vulnerability VCID-m2a7-q28u-1yfw
6
vulnerability VCID-mnx8-118d-efcr
7
vulnerability VCID-t8vm-tfnq-5kak
8
vulnerability VCID-ykj6-ptd4-7qfs
9
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10
2
url pkg:composer/moodle/moodle@4.3.7
purl pkg:composer/moodle/moodle@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-9xk9-qb9x-jfcs
10
vulnerability VCID-a1ek-x154-5ydy
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-ffp4-23na-rkgr
13
vulnerability VCID-gwnb-e3gt-kqcb
14
vulnerability VCID-gzdw-424p-mqfa
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-nctp-rev5-puej
19
vulnerability VCID-pd2f-4kxt-bkgp
20
vulnerability VCID-rcr9-z41f-sqbr
21
vulnerability VCID-sgdq-5ha7-nfh2
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-ueyy-v42v-7ydh
24
vulnerability VCID-vve8-f9s9-v7ft
25
vulnerability VCID-wwx4-ns21-k3hd
26
vulnerability VCID-wytb-bryq-yqb4
27
vulnerability VCID-xqha-pgc4-3udb
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z5u9-5522-h7fx
30
vulnerability VCID-z693-m8fg-63cc
31
vulnerability VCID-zjqu-hbpf-9qe1
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7
3
url pkg:composer/moodle/moodle@4.4.3
purl pkg:composer/moodle/moodle@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dr5e-6s1a-6uas
18
vulnerability VCID-f1da-1duc-2uhb
19
vulnerability VCID-ffp4-23na-rkgr
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-hufb-p6pa-63c9
23
vulnerability VCID-j3ts-5ghc-4qct
24
vulnerability VCID-kwhy-pkt9-1kfe
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-nctp-rev5-puej
28
vulnerability VCID-pd2f-4kxt-bkgp
29
vulnerability VCID-sgdq-5ha7-nfh2
30
vulnerability VCID-t8vm-tfnq-5kak
31
vulnerability VCID-ueyy-v42v-7ydh
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-xqha-pgc4-3udb
37
vulnerability VCID-yby1-g45r-rugg
38
vulnerability VCID-ykj6-ptd4-7qfs
39
vulnerability VCID-z5u9-5522-h7fx
40
vulnerability VCID-z693-m8fg-63cc
41
vulnerability VCID-zjqu-hbpf-9qe1
42
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3
aliases CVE-2024-45691, GHSA-xfv7-h2qg-rjm7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2urf-d2qr-abdy
6
url VCID-2wsu-7rzh-h7cs
vulnerability_id VCID-2wsu-7rzh-h7cs
summary 
Moodle has user information visibility control issues in gradebook reports
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43429
reference_id
reference_type
scores
0
value 0.00296
scoring_system epss
scoring_elements 0.53232
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43429
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304257
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:15:16Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304257
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461197
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:15:16Z/
url https://moodle.org/mod/forum/discuss.php?d=461197
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43429
reference_id CVE-2024-43429
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43429
6
reference_url https://github.com/advisories/GHSA-c767-4whh-v7rw
reference_id GHSA-c767-4whh-v7rw
reference_type
scores
url https://github.com/advisories/GHSA-c767-4whh-v7rw
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43429, GHSA-c767-4whh-v7rw
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2wsu-7rzh-h7cs
7
url VCID-3mgk-4c3z-sudt
vulnerability_id VCID-3mgk-4c3z-sudt
summary 
Moodle vulnerable to Server-Side Request Forgery
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36396
reference_id
reference_type
scores
0
value 0.01884
scoring_system epss
scoring_elements 0.83505
published_at 2026-06-04T12:55:00Z
1
value 0.01884
scoring_system epss
scoring_elements 0.83529
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36396
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424802
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-05T15:47:31Z/
url https://moodle.org/mod/forum/discuss.php?d=424802
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36396
reference_id CVE-2021-36396
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36396
4
reference_url https://github.com/advisories/GHSA-4rmj-w58m-fvch
reference_id GHSA-4rmj-w58m-fvch
reference_type
scores
url https://github.com/advisories/GHSA-4rmj-w58m-fvch
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36396, GHSA-4rmj-w58m-fvch
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3mgk-4c3z-sudt
8
url VCID-3nu2-1cwj-sfdd
vulnerability_id VCID-3nu2-1cwj-sfdd
summary 
Moodle BigBlueButton web service leaks meeting joining information
Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38273
reference_id
reference_type
scores
0
value 0.00199
scoring_system epss
scoring_elements 0.4198
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38273
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/500cec575731fd8575569dcb5811535751dddae1
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/500cec575731fd8575569dcb5811535751dddae1
3
reference_url https://github.com/moodle/moodle/commit/647b9dc06409211018c9f28581504d096ce9e3a8
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/647b9dc06409211018c9f28581504d096ce9e3a8
4
reference_url https://github.com/moodle/moodle/commit/6c0645ca29b195b5caaffc27d80f2ff715c33a48
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/6c0645ca29b195b5caaffc27d80f2ff715c33a48
5
reference_url https://github.com/moodle/moodle/commit/a10506b8d70609478fef156d489e0c7d727b6098
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a10506b8d70609478fef156d489e0c7d727b6098
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
8
reference_url https://moodle.org/mod/forum/discuss.php?d=459498
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/
url https://moodle.org/mod/forum/discuss.php?d=459498
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38273
reference_id CVE-2024-38273
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38273
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
11
reference_url https://github.com/advisories/GHSA-x29x-qwvx-fxr2
reference_id GHSA-x29x-qwvx-fxr2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x29x-qwvx-fxr2
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.11
purl pkg:composer/moodle/moodle@4.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-d92c-j4yy-fud3
24
vulnerability VCID-dky9-v96e-pubh
25
vulnerability VCID-f1da-1duc-2uhb
26
vulnerability VCID-ffp4-23na-rkgr
27
vulnerability VCID-g3km-hbas-x3cg
28
vulnerability VCID-gwnb-e3gt-kqcb
29
vulnerability VCID-gzdw-424p-mqfa
30
vulnerability VCID-hufb-p6pa-63c9
31
vulnerability VCID-j3ts-5ghc-4qct
32
vulnerability VCID-m2a7-q28u-1yfw
33
vulnerability VCID-m3jj-r66a-d7cv
34
vulnerability VCID-m9tk-fa8m-zbah
35
vulnerability VCID-mnx8-118d-efcr
36
vulnerability VCID-pd2f-4kxt-bkgp
37
vulnerability VCID-qruy-fs4p-43h1
38
vulnerability VCID-r4m3-9prr-dkby
39
vulnerability VCID-r5w9-cbyk-hqc6
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-ueyy-v42v-7ydh
44
vulnerability VCID-vsrk-zp7j-w7bk
45
vulnerability VCID-vve8-f9s9-v7ft
46
vulnerability VCID-wby4-h9ud-1yh5
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-yby1-g45r-rugg
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-zjqu-hbpf-9qe1
54
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11
1
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
2
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
3
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38273, GHSA-x29x-qwvx-fxr2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3nu2-1cwj-sfdd
9
url VCID-3nvq-s7y5-fufr
vulnerability_id VCID-3nvq-s7y5-fufr
summary 
Moodle reflected XSS via H5P error message
A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43439
reference_id
reference_type
scores
0
value 0.0129
scoring_system epss
scoring_elements 0.80023
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43439
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304268
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:50:51Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304268
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/c7d9026715a107ee16b9f9b2134ed4e6f667af99
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c7d9026715a107ee16b9f9b2134ed4e6f667af99
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461209
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:50:51Z/
url https://moodle.org/mod/forum/discuss.php?d=461209
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43439
reference_id CVE-2024-43439
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43439
6
reference_url https://github.com/advisories/GHSA-hjgc-jxjc-8v9j
reference_id GHSA-hjgc-jxjc-8v9j
reference_type
scores
url https://github.com/advisories/GHSA-hjgc-jxjc-8v9j
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43439, GHSA-hjgc-jxjc-8v9j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3nvq-s7y5-fufr
10
url VCID-3yre-ft3n-2fd3
vulnerability_id VCID-3yre-ft3n-2fd3
summary 
Moodle has an IDOR in messaging web service which allows access to some user details
A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3645
reference_id
reference_type
scores
0
value 0.00096
scoring_system epss
scoring_elements 0.26664
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3645
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359761
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359761
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/2fd810c8981f9b10087467a3b8fce779b157200f
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/2fd810c8981f9b10087467a3b8fce779b157200f
4
reference_url https://github.com/moodle/moodle/commit/a8179842b450659c288f284e06361a4fbab8742a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a8179842b450659c288f284e06361a4fbab8742a
5
reference_url https://github.com/moodle/moodle/commit/bb65effe41524d8373c1dc499c3323ac469ea558
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bb65effe41524d8373c1dc499c3323ac469ea558
6
reference_url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-72704&type=commits
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-72704&type=commits
7
reference_url https://moodle.org/mod/forum/discuss.php?d=467606
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/
url https://moodle.org/mod/forum/discuss.php?d=467606
8
reference_url https://access.redhat.com/security/cve/CVE-2025-3645
reference_id CVE-2025-3645
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:48Z/
url https://access.redhat.com/security/cve/CVE-2025-3645
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3645
reference_id CVE-2025-3645
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3645
10
reference_url https://github.com/advisories/GHSA-pj96-xh2w-fgqx
reference_id GHSA-pj96-xh2w-fgqx
reference_type
scores
url https://github.com/advisories/GHSA-pj96-xh2w-fgqx
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3645, GHSA-pj96-xh2w-fgqx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3yre-ft3n-2fd3
11
url VCID-44zf-1dw7-qkf5
vulnerability_id VCID-44zf-1dw7-qkf5
summary 
Moodle formula injection vulnerability
A flaw was found in Moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attacker could exploit this by providing malicious data that, when exported and opened in a spreadsheet, allows arbitrary formulas to execute. This can lead to compromised data integrity and unintended operations within the spreadsheet.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67851
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.1974
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67851
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423841
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423841
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/29820c5ff4ef381c7a743091ec5c68ac82903b22
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/29820c5ff4ef381c7a743091ec5c68ac82903b22
4
reference_url https://github.com/moodle/moodle/commit/aa66bacd0783cbc33528fba9c2adca1f685a59bd
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/aa66bacd0783cbc33528fba9c2adca1f685a59bd
5
reference_url https://github.com/moodle/moodle/commit/dc57ccc491a2a04032445a3ee92fd0d335ebd746
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dc57ccc491a2a04032445a3ee92fd0d335ebd746
6
reference_url https://moodle.org/mod/forum/discuss.php?d=471301
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/
url https://moodle.org/mod/forum/discuss.php?d=471301
7
reference_url https://access.redhat.com/security/cve/CVE-2025-67851
reference_id CVE-2025-67851
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T17:02:36Z/
url https://access.redhat.com/security/cve/CVE-2025-67851
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67851
reference_id CVE-2025-67851
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67851
9
reference_url https://github.com/advisories/GHSA-qfh6-h7j6-fvjv
reference_id GHSA-qfh6-h7j6-fvjv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qfh6-h7j6-fvjv
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67851, GHSA-qfh6-h7j6-fvjv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-44zf-1dw7-qkf5
12
url VCID-4spj-h1cc-rbfg
vulnerability_id VCID-4spj-h1cc-rbfg
summary 
Moodle vulnerable to Uncontrolled Resource Consumption
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36395
reference_id
reference_type
scores
0
value 0.00667
scoring_system epss
scoring_elements 0.71648
published_at 2026-06-04T12:55:00Z
1
value 0.00667
scoring_system epss
scoring_elements 0.71692
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36395
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424801
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T19:01:39Z/
url https://moodle.org/mod/forum/discuss.php?d=424801
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36395
reference_id CVE-2021-36395
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36395
4
reference_url https://github.com/advisories/GHSA-273w-7fxj-pcp6
reference_id GHSA-273w-7fxj-pcp6
reference_type
scores
url https://github.com/advisories/GHSA-273w-7fxj-pcp6
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36395, GHSA-273w-7fxj-pcp6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4spj-h1cc-rbfg
13
url VCID-4zvp-nmrk-4qbq
vulnerability_id VCID-4zvp-nmrk-4qbq
summary 
Moodle Cross-site Scripting (XSS) vulnerability
A flaw was found in Moodle. This Cross-site Scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface could be manipulated.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67849
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00697
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67849
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423835
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423835
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/a3063dcaa44dbe66e60a37cadb33bfadfe4feb03
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a3063dcaa44dbe66e60a37cadb33bfadfe4feb03
4
reference_url https://moodle.org/mod/forum/discuss.php?d=471299
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471299
5
reference_url https://access.redhat.com/security/cve/CVE-2025-67849
reference_id CVE-2025-67849
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://access.redhat.com/security/cve/CVE-2025-67849
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67849
reference_id CVE-2025-67849
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67849
7
reference_url https://github.com/advisories/GHSA-mhf6-pp52-8wqj
reference_id GHSA-mhf6-pp52-8wqj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mhf6-pp52-8wqj
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67849, GHSA-mhf6-pp52-8wqj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4zvp-nmrk-4qbq
14
url VCID-5ba5-pee7-6kh1
vulnerability_id VCID-5ba5-pee7-6kh1
summary 
Moodle stored Cross-site Scripting (XSS)
Additional sanitizing was required when opening the equation editor to prevent a stored Cross-site Scripting (XSS) risk when editing another user's equation.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81352
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81352
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-33997
reference_id
reference_type
scores
0
value 0.00997
scoring_system epss
scoring_elements 0.77333
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-33997
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/25b1b643c873f6d83ae61903012896b2811fa3bb
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/25b1b643c873f6d83ae61903012896b2811fa3bb
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458385
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T16:36:59Z/
url https://moodle.org/mod/forum/discuss.php?d=458385
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-33997
reference_id CVE-2024-33997
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-33997
6
reference_url https://github.com/advisories/GHSA-9qgq-93c7-9hm4
reference_id GHSA-9qgq-93c7-9hm4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9qgq-93c7-9hm4
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-33997, GHSA-9qgq-93c7-9hm4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ba5-pee7-6kh1
15
url VCID-5s33-v19s-sqd6
vulnerability_id VCID-5s33-v19s-sqd6
summary 
Moodle Cross-site Scripting (XSS)
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81062
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81062
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34000
reference_id
reference_type
scores
0
value 0.0028
scoring_system epss
scoring_elements 0.51641
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34000
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/4c966677de06bff56d46d55c419049f78e70f017
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/4c966677de06bff56d46d55c419049f78e70f017
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458388
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-07T16:24:48Z/
url https://moodle.org/mod/forum/discuss.php?d=458388
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34000
reference_id CVE-2024-34000
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34000
6
reference_url https://github.com/advisories/GHSA-8qwh-4vwv-7c5m
reference_id GHSA-8qwh-4vwv-7c5m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8qwh-4vwv-7c5m
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34000, GHSA-8qwh-4vwv-7c5m
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5s33-v19s-sqd6
16
url VCID-5snb-dyv3-efe9
vulnerability_id VCID-5snb-dyv3-efe9
summary 
Moodle Open Redirect vulnerability
A flaw was found in Moodle. An Open Redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-controlled pages after they have successfully authenticated. This occurs due to insufficient validation of redirect parameters, which could lead to phishing attacks or information disclosure.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67852
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03529
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67852
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423844
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:44:09Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423844
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/fa1624c8c9e3efa917f0e9d2666bb59d8be2a975
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/fa1624c8c9e3efa917f0e9d2666bb59d8be2a975
4
reference_url https://moodle.org/mod/forum/discuss.php?d=471302
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471302
5
reference_url https://access.redhat.com/security/cve/CVE-2025-67852
reference_id CVE-2025-67852
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:44:09Z/
url https://access.redhat.com/security/cve/CVE-2025-67852
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67852
reference_id CVE-2025-67852
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67852
7
reference_url https://github.com/advisories/GHSA-qv78-6gpp-hm68
reference_id GHSA-qv78-6gpp-hm68
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qv78-6gpp-hm68
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67852, GHSA-qv78-6gpp-hm68
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5snb-dyv3-efe9
17
url VCID-5xhb-mx3v-fuhs
vulnerability_id VCID-5xhb-mx3v-fuhs
summary 
Moodle Inserts Sensitive Information Into Sent Data
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67857
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.06023
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67857
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423868
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423868
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ac30e7e19357f696979b7ffd760a7131b6ad88f6
4
reference_url https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c6cb8d971257c04a12a2c5d8510a89cb906f46f0
5
reference_url https://moodle.org/mod/forum/discuss.php?d=471307
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/
url https://moodle.org/mod/forum/discuss.php?d=471307
6
reference_url https://access.redhat.com/security/cve/CVE-2025-67857
reference_id CVE-2025-67857
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:40:38Z/
url https://access.redhat.com/security/cve/CVE-2025-67857
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67857
reference_id CVE-2025-67857
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67857
8
reference_url https://github.com/advisories/GHSA-8jrv-wx83-w3xj
reference_id GHSA-8jrv-wx83-w3xj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8jrv-wx83-w3xj
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67857, GHSA-8jrv-wx83-w3xj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5xhb-mx3v-fuhs
18
url VCID-61ry-zz34-8qhj
vulnerability_id VCID-61ry-zz34-8qhj
summary 
Moodle authentication bypass vulnerability
A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67848
reference_id
reference_type
scores
0
value 0.00048
scoring_system epss
scoring_elements 0.15459
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67848
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423831
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423831
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/62f372e9d861d16df702d3c7726905fa2730e3d8
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/62f372e9d861d16df702d3c7726905fa2730e3d8
4
reference_url https://github.com/moodle/moodle/commit/c2705e2c18962fec4f21b9c34ed386be2a379663
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c2705e2c18962fec4f21b9c34ed386be2a379663
5
reference_url https://moodle.org/mod/forum/discuss.php?d=471298
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://moodle.org/mod/forum/discuss.php?d=471298
6
reference_url https://access.redhat.com/security/cve/CVE-2025-67848
reference_id CVE-2025-67848
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:50Z/
url https://access.redhat.com/security/cve/CVE-2025-67848
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67848
reference_id CVE-2025-67848
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67848
8
reference_url https://github.com/advisories/GHSA-j5jv-w5cw-j9ff
reference_id GHSA-j5jv-w5cw-j9ff
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j5jv-w5cw-j9ff
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67848, GHSA-j5jv-w5cw-j9ff
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-61ry-zz34-8qhj
19
url VCID-657g-68tv-dkam
vulnerability_id VCID-657g-68tv-dkam
summary 
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
A Denial of Service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26047
reference_id
reference_type
scores
0
value 0.00094
scoring_system epss
scoring_elements 0.262
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26047
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440905
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2440905
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c
4
reference_url https://moodle.org/mod/forum/discuss.php?d=473316
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=473316
5
reference_url https://access.redhat.com/security/cve/CVE-2026-26047
reference_id CVE-2026-26047
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/
url https://access.redhat.com/security/cve/CVE-2026-26047
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26047
reference_id CVE-2026-26047
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26047
7
reference_url https://github.com/advisories/GHSA-cg8j-5cr2-568q
reference_id GHSA-cg8j-5cr2-568q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cg8j-5cr2-568q
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.9
purl pkg:composer/moodle/moodle@4.5.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9
1
url pkg:composer/moodle/moodle@5.0.5
purl pkg:composer/moodle/moodle@5.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5
2
url pkg:composer/moodle/moodle@5.1.2
purl pkg:composer/moodle/moodle@5.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2
aliases CVE-2026-26047, GHSA-cg8j-5cr2-568q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-657g-68tv-dkam
20
url VCID-6726-ca8y-4uez
vulnerability_id VCID-6726-ca8y-4uez
summary 
Improper Access Control in moodle
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25981
reference_id
reference_type
scores
0
value 0.00271
scoring_system epss
scoring_elements 0.50828
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25981
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264097
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264097
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/1c059cb3fe39da46959e912dc671844dd204e83b
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/1c059cb3fe39da46959e912dc671844dd204e83b
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455637
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url https://moodle.org/mod/forum/discuss.php?d=455637
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25981
reference_id CVE-2024-25981
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25981
8
reference_url https://github.com/advisories/GHSA-jfrg-9hpq-9hvp
reference_id GHSA-jfrg-9hpq-9hvp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jfrg-9hpq-9hvp
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.9
purl pkg:composer/moodle/moodle@4.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6cvg-r9am-wbh5
19
vulnerability VCID-6p1s-2r14-z7ax
20
vulnerability VCID-7p54-yn8k-aydw
21
vulnerability VCID-7trf-g8dq-tua1
22
vulnerability VCID-893t-9cja-43g2
23
vulnerability VCID-8uah-srba-6ubb
24
vulnerability VCID-9rqr-xzr8-5fgf
25
vulnerability VCID-9xk9-qb9x-jfcs
26
vulnerability VCID-a1ek-x154-5ydy
27
vulnerability VCID-ajrr-8392-kkcw
28
vulnerability VCID-b3vw-8hzh-dybx
29
vulnerability VCID-d92c-j4yy-fud3
30
vulnerability VCID-dky9-v96e-pubh
31
vulnerability VCID-dp61-6ban-cyda
32
vulnerability VCID-evef-t6cx-vqcc
33
vulnerability VCID-f1da-1duc-2uhb
34
vulnerability VCID-ffp4-23na-rkgr
35
vulnerability VCID-g3km-hbas-x3cg
36
vulnerability VCID-gwnb-e3gt-kqcb
37
vulnerability VCID-gzdw-424p-mqfa
38
vulnerability VCID-hmuw-bjax-37bz
39
vulnerability VCID-hufb-p6pa-63c9
40
vulnerability VCID-j3ts-5ghc-4qct
41
vulnerability VCID-jkyc-esnt-p3ay
42
vulnerability VCID-m2a7-q28u-1yfw
43
vulnerability VCID-m3jj-r66a-d7cv
44
vulnerability VCID-m9tk-fa8m-zbah
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-pd2f-4kxt-bkgp
48
vulnerability VCID-pged-191y-quhm
49
vulnerability VCID-qruy-fs4p-43h1
50
vulnerability VCID-r4m3-9prr-dkby
51
vulnerability VCID-r5w9-cbyk-hqc6
52
vulnerability VCID-rm2q-xde7-a3ej
53
vulnerability VCID-sdxf-f1b3-t3cc
54
vulnerability VCID-sgdq-5ha7-nfh2
55
vulnerability VCID-t8vm-tfnq-5kak
56
vulnerability VCID-team-9wba-yufc
57
vulnerability VCID-tgs8-3n7x-cyc1
58
vulnerability VCID-ueyy-v42v-7ydh
59
vulnerability VCID-umd1-pmr4-4bgs
60
vulnerability VCID-vsrk-zp7j-w7bk
61
vulnerability VCID-vve8-f9s9-v7ft
62
vulnerability VCID-wby4-h9ud-1yh5
63
vulnerability VCID-wwny-t2ez-y3e1
64
vulnerability VCID-wwx4-ns21-k3hd
65
vulnerability VCID-wytb-bryq-yqb4
66
vulnerability VCID-y4g2-328f-qbge
67
vulnerability VCID-yby1-g45r-rugg
68
vulnerability VCID-ykj6-ptd4-7qfs
69
vulnerability VCID-ytd5-2swj-wkh1
70
vulnerability VCID-z5u9-5522-h7fx
71
vulnerability VCID-zjqu-hbpf-9qe1
72
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.9
1
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
2
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25981, GHSA-jfrg-9hpq-9hvp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6726-ca8y-4uez
21
url VCID-6cvg-r9am-wbh5
vulnerability_id VCID-6cvg-r9am-wbh5
summary 
Moodle has a SQL injection risk in course search module list filter
An SQL injection risk was identified in the module list filter within course search.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:35:13Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26533
reference_id
reference_type
scores
0
value 0.00402
scoring_system epss
scoring_elements 0.61178
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26533
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/1310e64699807ead6c38ee89354ac57c503c2836
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/1310e64699807ead6c38ee89354ac57c503c2836
4
reference_url https://moodle.org/mod/forum/discuss.php?d=466150
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:35:13Z/
url https://moodle.org/mod/forum/discuss.php?d=466150
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26533
reference_id CVE-2025-26533
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26533
6
reference_url https://github.com/advisories/GHSA-rg56-94j7-hjx9
reference_id GHSA-rg56-94j7-hjx9
reference_type
scores
url https://github.com/advisories/GHSA-rg56-94j7-hjx9
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26533, GHSA-rg56-94j7-hjx9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6cvg-r9am-wbh5
22
url VCID-6p1s-2r14-z7ax
vulnerability_id VCID-6p1s-2r14-z7ax
summary 
Moodle admin presets export tool includes some secrets that should not be exported
A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43427
reference_id
reference_type
scores
0
value 0.00632
scoring_system epss
scoring_elements 0.70757
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43427
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304255
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:02:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304255
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461195
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:02:44Z/
url https://moodle.org/mod/forum/discuss.php?d=461195
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43427
reference_id CVE-2024-43427
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43427
6
reference_url https://github.com/advisories/GHSA-vpq5-56jj-vf2m
reference_id GHSA-vpq5-56jj-vf2m
reference_type
scores
url https://github.com/advisories/GHSA-vpq5-56jj-vf2m
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43427, GHSA-vpq5-56jj-vf2m
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6p1s-2r14-z7ax
23
url VCID-7p54-yn8k-aydw
vulnerability_id VCID-7p54-yn8k-aydw
summary 
Moodle Remote Code Execution vulnerability
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82576
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82576
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43425
reference_id
reference_type
scores
0
value 0.88917
scoring_system epss
scoring_elements 0.99541
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43425
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304253
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:20Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304253
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461193
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:20Z/
url https://moodle.org/mod/forum/discuss.php?d=461193
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52350.py
reference_id CVE-2024-43425
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52350.py
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43425
reference_id CVE-2024-43425
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43425
7
reference_url https://github.com/advisories/GHSA-v6f4-v8h8-3c87
reference_id GHSA-v6f4-v8h8-3c87
reference_type
scores
url https://github.com/advisories/GHSA-v6f4-v8h8-3c87
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43425, GHSA-v6f4-v8h8-3c87
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7p54-yn8k-aydw
24
url VCID-7trf-g8dq-tua1
vulnerability_id VCID-7trf-g8dq-tua1
summary 
Moodle has a time restriction bypass
An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62401
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.12997
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62401
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404434
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404434
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470390
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470390
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62401
reference_id CVE-2025-62401
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/
url https://access.redhat.com/security/cve/CVE-2025-62401
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62401
reference_id CVE-2025-62401
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62401
7
reference_url https://github.com/advisories/GHSA-w29j-8phw-ffjf
reference_id GHSA-w29j-8phw-ffjf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w29j-8phw-ffjf
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.21
purl pkg:composer/moodle/moodle@4.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.21
1
url pkg:composer/moodle/moodle@4.4.11
purl pkg:composer/moodle/moodle@4.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11
2
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
3
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62401, GHSA-w29j-8phw-ffjf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7trf-g8dq-tua1
25
url VCID-893t-9cja-43g2
vulnerability_id VCID-893t-9cja-43g2
summary 
Moodle Unsanitized HTML in site log for config_log_created
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80585
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80585
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34006
reference_id
reference_type
scores
0
value 0.00424
scoring_system epss
scoring_elements 0.62548
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34006
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/cd85e090f3feb06e6eff65d1499a67353d82d3cb
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/cd85e090f3feb06e6eff65d1499a67353d82d3cb
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458395
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T15:10:13Z/
url https://moodle.org/mod/forum/discuss.php?d=458395
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34006
reference_id CVE-2024-34006
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34006
6
reference_url https://github.com/advisories/GHSA-vvh5-7v3m-j3mj
reference_id GHSA-vvh5-7v3m-j3mj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vvh5-7v3m-j3mj
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34006, GHSA-vvh5-7v3m-j3mj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-893t-9cja-43g2
26
url VCID-8bzr-1mub-3ffq
vulnerability_id VCID-8bzr-1mub-3ffq
summary 
Moodle Improper Input Validation vulnerability
In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36402
reference_id
reference_type
scores
0
value 0.00346
scoring_system epss
scoring_elements 0.57374
published_at 2026-06-04T12:55:00Z
1
value 0.00346
scoring_system epss
scoring_elements 0.57426
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36402
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424808
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-07T17:59:21Z/
url https://moodle.org/mod/forum/discuss.php?d=424808
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36402
reference_id CVE-2021-36402
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36402
4
reference_url https://github.com/advisories/GHSA-gv8f-43pg-c5qw
reference_id GHSA-gv8f-43pg-c5qw
reference_type
scores
url https://github.com/advisories/GHSA-gv8f-43pg-c5qw
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36402, GHSA-gv8f-43pg-c5qw
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8bzr-1mub-3ffq
27
url VCID-8uah-srba-6ubb
vulnerability_id VCID-8uah-srba-6ubb
summary 
Moodle has an IDOR in badges allows disabling of arbitrary badges
Insufficient capability checks made it possible to disable badges a user does not have permission to access.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:42Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84239
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26531
reference_id
reference_type
scores
0
value 0.00345
scoring_system epss
scoring_elements 0.57372
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26531
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466148
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:42Z/
url https://moodle.org/mod/forum/discuss.php?d=466148
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26531
reference_id CVE-2025-26531
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26531
5
reference_url https://github.com/advisories/GHSA-g88w-v4cq-qgcp
reference_id GHSA-g88w-v4cq-qgcp
reference_type
scores
url https://github.com/advisories/GHSA-g88w-v4cq-qgcp
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26531, GHSA-g88w-v4cq-qgcp
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8uah-srba-6ubb
28
url VCID-95f1-6g3r-rkg4
vulnerability_id VCID-95f1-6g3r-rkg4
summary 
Cross site scripting in moodle
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-29374.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-29374.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-29374
reference_id
reference_type
scores
0
value 0.00351
scoring_system epss
scoring_elements 0.57831
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-29374
2
reference_url https://gist.github.com/fir3storm/f9c7f3ec1a6496498517ed216d2640b2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-22T14:12:06Z/
url https://gist.github.com/fir3storm/f9c7f3ec1a6496498517ed216d2640b2
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2270860
reference_id 2270860
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2270860
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-29374
reference_id CVE-2024-29374
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-29374
6
reference_url https://github.com/advisories/GHSA-3qw5-v9cc-v262
reference_id GHSA-3qw5-v9cc-v262
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3qw5-v9cc-v262
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.10
purl pkg:composer/moodle/moodle@3.10.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6726-ca8y-4uez
19
vulnerability VCID-6cvg-r9am-wbh5
20
vulnerability VCID-6p1s-2r14-z7ax
21
vulnerability VCID-6rc8-bs9z-5bb2
22
vulnerability VCID-7p54-yn8k-aydw
23
vulnerability VCID-7trf-g8dq-tua1
24
vulnerability VCID-893t-9cja-43g2
25
vulnerability VCID-8uah-srba-6ubb
26
vulnerability VCID-9rqr-xzr8-5fgf
27
vulnerability VCID-9xk9-qb9x-jfcs
28
vulnerability VCID-a1ek-x154-5ydy
29
vulnerability VCID-ajrr-8392-kkcw
30
vulnerability VCID-b3vw-8hzh-dybx
31
vulnerability VCID-d92c-j4yy-fud3
32
vulnerability VCID-dky9-v96e-pubh
33
vulnerability VCID-dp61-6ban-cyda
34
vulnerability VCID-evef-t6cx-vqcc
35
vulnerability VCID-f1da-1duc-2uhb
36
vulnerability VCID-ffp4-23na-rkgr
37
vulnerability VCID-g3km-hbas-x3cg
38
vulnerability VCID-gwnb-e3gt-kqcb
39
vulnerability VCID-gycn-bey2-4yam
40
vulnerability VCID-gzdw-424p-mqfa
41
vulnerability VCID-hmuw-bjax-37bz
42
vulnerability VCID-hufb-p6pa-63c9
43
vulnerability VCID-j21p-heue-nqd9
44
vulnerability VCID-j3ts-5ghc-4qct
45
vulnerability VCID-jkyc-esnt-p3ay
46
vulnerability VCID-m2a7-q28u-1yfw
47
vulnerability VCID-m3jj-r66a-d7cv
48
vulnerability VCID-m9tk-fa8m-zbah
49
vulnerability VCID-mhh7-n7ut-hkh6
50
vulnerability VCID-mnx8-118d-efcr
51
vulnerability VCID-ms4e-v5zc-9kgc
52
vulnerability VCID-pd2f-4kxt-bkgp
53
vulnerability VCID-pged-191y-quhm
54
vulnerability VCID-qabh-bpmn-1ye5
55
vulnerability VCID-qruy-fs4p-43h1
56
vulnerability VCID-r1ug-e8x6-83gt
57
vulnerability VCID-r4m3-9prr-dkby
58
vulnerability VCID-r5w9-cbyk-hqc6
59
vulnerability VCID-rm2q-xde7-a3ej
60
vulnerability VCID-sca8-zx4m-sub6
61
vulnerability VCID-sdxf-f1b3-t3cc
62
vulnerability VCID-sgdq-5ha7-nfh2
63
vulnerability VCID-t8vm-tfnq-5kak
64
vulnerability VCID-team-9wba-yufc
65
vulnerability VCID-tgs8-3n7x-cyc1
66
vulnerability VCID-ueyy-v42v-7ydh
67
vulnerability VCID-uhc9-p93a-gbau
68
vulnerability VCID-umd1-pmr4-4bgs
69
vulnerability VCID-vsrk-zp7j-w7bk
70
vulnerability VCID-vve8-f9s9-v7ft
71
vulnerability VCID-wby4-h9ud-1yh5
72
vulnerability VCID-wwny-t2ez-y3e1
73
vulnerability VCID-wwx4-ns21-k3hd
74
vulnerability VCID-wytb-bryq-yqb4
75
vulnerability VCID-xh4x-t7he-pufq
76
vulnerability VCID-y4g2-328f-qbge
77
vulnerability VCID-yby1-g45r-rugg
78
vulnerability VCID-yc6t-am1p-x3ev
79
vulnerability VCID-yenj-fv96-pbd7
80
vulnerability VCID-ykj6-ptd4-7qfs
81
vulnerability VCID-ytd5-2swj-wkh1
82
vulnerability VCID-z5u9-5522-h7fx
83
vulnerability VCID-zjqu-hbpf-9qe1
84
vulnerability VCID-zrjj-atms-8uf9
85
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.10
aliases CVE-2024-29374, GHSA-3qw5-v9cc-v262
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-95f1-6g3r-rkg4
29
url VCID-9rqr-xzr8-5fgf
vulnerability_id VCID-9rqr-xzr8-5fgf
summary 
Moodle allows users to retrieve information they did not have permission to access
A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45689
reference_id
reference_type
scores
0
value 0.00126
scoring_system epss
scoring_elements 0.31459
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45689
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2309941
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:47Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2309941
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45689
reference_id CVE-2024-45689
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45689
6
reference_url https://github.com/advisories/GHSA-j822-x5gg-5r56
reference_id GHSA-j822-x5gg-5r56
reference_type
scores
url https://github.com/advisories/GHSA-j822-x5gg-5r56
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.13
purl pkg:composer/moodle/moodle@4.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-mnx8-118d-efcr
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-t8vm-tfnq-5kak
28
vulnerability VCID-ueyy-v42v-7ydh
29
vulnerability VCID-vve8-f9s9-v7ft
30
vulnerability VCID-wby4-h9ud-1yh5
31
vulnerability VCID-wwx4-ns21-k3hd
32
vulnerability VCID-wytb-bryq-yqb4
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z5u9-5522-h7fx
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.13
1
url pkg:composer/moodle/moodle@4.2.10
purl pkg:composer/moodle/moodle@4.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-9xk9-qb9x-jfcs
4
vulnerability VCID-j3ts-5ghc-4qct
5
vulnerability VCID-m2a7-q28u-1yfw
6
vulnerability VCID-mnx8-118d-efcr
7
vulnerability VCID-t8vm-tfnq-5kak
8
vulnerability VCID-ykj6-ptd4-7qfs
9
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10
2
url pkg:composer/moodle/moodle@4.3.7
purl pkg:composer/moodle/moodle@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-9xk9-qb9x-jfcs
10
vulnerability VCID-a1ek-x154-5ydy
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-ffp4-23na-rkgr
13
vulnerability VCID-gwnb-e3gt-kqcb
14
vulnerability VCID-gzdw-424p-mqfa
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-nctp-rev5-puej
19
vulnerability VCID-pd2f-4kxt-bkgp
20
vulnerability VCID-rcr9-z41f-sqbr
21
vulnerability VCID-sgdq-5ha7-nfh2
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-ueyy-v42v-7ydh
24
vulnerability VCID-vve8-f9s9-v7ft
25
vulnerability VCID-wwx4-ns21-k3hd
26
vulnerability VCID-wytb-bryq-yqb4
27
vulnerability VCID-xqha-pgc4-3udb
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z5u9-5522-h7fx
30
vulnerability VCID-z693-m8fg-63cc
31
vulnerability VCID-zjqu-hbpf-9qe1
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7
3
url pkg:composer/moodle/moodle@4.4.3
purl pkg:composer/moodle/moodle@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dr5e-6s1a-6uas
18
vulnerability VCID-f1da-1duc-2uhb
19
vulnerability VCID-ffp4-23na-rkgr
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-hufb-p6pa-63c9
23
vulnerability VCID-j3ts-5ghc-4qct
24
vulnerability VCID-kwhy-pkt9-1kfe
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-nctp-rev5-puej
28
vulnerability VCID-pd2f-4kxt-bkgp
29
vulnerability VCID-sgdq-5ha7-nfh2
30
vulnerability VCID-t8vm-tfnq-5kak
31
vulnerability VCID-ueyy-v42v-7ydh
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-xqha-pgc4-3udb
37
vulnerability VCID-yby1-g45r-rugg
38
vulnerability VCID-ykj6-ptd4-7qfs
39
vulnerability VCID-z5u9-5522-h7fx
40
vulnerability VCID-z693-m8fg-63cc
41
vulnerability VCID-zjqu-hbpf-9qe1
42
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3
aliases CVE-2024-45689, GHSA-j822-x5gg-5r56
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9rqr-xzr8-5fgf
30
url VCID-9xk9-qb9x-jfcs
vulnerability_id VCID-9xk9-qb9x-jfcs
summary 
Moodle leaks user names
A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48896
reference_id
reference_type
scores
0
value 0.0031
scoring_system epss
scoring_elements 0.54503
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48896
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318822
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:57:51Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318822
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48896
reference_id CVE-2024-48896
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48896
4
reference_url https://github.com/advisories/GHSA-cq5f-wv7p-5gfc
reference_id GHSA-cq5f-wv7p-5gfc
reference_type
scores
url https://github.com/advisories/GHSA-cq5f-wv7p-5gfc
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.14
purl pkg:composer/moodle/moodle@4.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-gwnb-e3gt-kqcb
19
vulnerability VCID-gzdw-424p-mqfa
20
vulnerability VCID-hufb-p6pa-63c9
21
vulnerability VCID-j3ts-5ghc-4qct
22
vulnerability VCID-m2a7-q28u-1yfw
23
vulnerability VCID-pd2f-4kxt-bkgp
24
vulnerability VCID-sgdq-5ha7-nfh2
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vve8-f9s9-v7ft
27
vulnerability VCID-wby4-h9ud-1yh5
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-yby1-g45r-rugg
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-zjqu-hbpf-9qe1
33
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14
1
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
2
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
3
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48896, GHSA-cq5f-wv7p-5gfc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9xk9-qb9x-jfcs
31
url VCID-a1ek-x154-5ydy
vulnerability_id VCID-a1ek-x154-5ydy
summary 
Moodle has an arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as
those with TeX Live installed).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26525
reference_id
reference_type
scores
0
value 0.00212
scoring_system epss
scoring_elements 0.438
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26525
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:59:34Z/
url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466141
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:59:34Z/
url https://moodle.org/mod/forum/discuss.php?d=466141
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26525
reference_id CVE-2025-26525
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26525
5
reference_url https://github.com/advisories/GHSA-4hmr-39vp-xfrr
reference_id GHSA-4hmr-39vp-xfrr
reference_type
scores
url https://github.com/advisories/GHSA-4hmr-39vp-xfrr
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26525, GHSA-4hmr-39vp-xfrr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a1ek-x154-5ydy
32
url VCID-ajrr-8392-kkcw
vulnerability_id VCID-ajrr-8392-kkcw
summary 
Moodle CSRF risks due to misuse of confirm_sesskey
Incorrect CSRF token checks resulted in multiple CSRF risks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38276
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50527
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38276
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/093aedf79889114d004495f05969168b646b0285
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/093aedf79889114d004495f05969168b646b0285
3
reference_url https://github.com/moodle/moodle/commit/137d311fd1354c679b974633512a771e6e0559a1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/137d311fd1354c679b974633512a771e6e0559a1
4
reference_url https://github.com/moodle/moodle/commit/30fadc3686fa7490860a0bd87a29636139dfb371
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/30fadc3686fa7490860a0bd87a29636139dfb371
5
reference_url https://github.com/moodle/moodle/commit/31ced0851189a6879e4cd27c7e65d21dd9d6e87e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/31ced0851189a6879e4cd27c7e65d21dd9d6e87e
6
reference_url https://github.com/moodle/moodle/commit/57f20b6cb352893871c3afdfa8a4c09a96e16764
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/57f20b6cb352893871c3afdfa8a4c09a96e16764
7
reference_url https://github.com/moodle/moodle/commit/756090ed79aa056d0b5f58e7a1dff67f139f76b4
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/756090ed79aa056d0b5f58e7a1dff67f139f76b4
8
reference_url https://github.com/moodle/moodle/commit/9af9711c0a78ebad87d49bcb369ff813bc57d0a7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/9af9711c0a78ebad87d49bcb369ff813bc57d0a7
9
reference_url https://github.com/moodle/moodle/commit/a0d8c025f732d5c18a2b9d1a8e5cbee35dce86f4
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a0d8c025f732d5c18a2b9d1a8e5cbee35dce86f4
10
reference_url https://github.com/moodle/moodle/commit/c18b59808cefe7b54c85dce6bf2cc71601080667
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c18b59808cefe7b54c85dce6bf2cc71601080667
11
reference_url https://github.com/moodle/moodle/commit/c1aacb3e2884ea4dcc221c5ef2e449ce345f78ae
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c1aacb3e2884ea4dcc221c5ef2e449ce345f78ae
12
reference_url https://github.com/moodle/moodle/commit/c5b1604e8136db6d72057dd8052955058489206c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c5b1604e8136db6d72057dd8052955058489206c
13
reference_url https://github.com/moodle/moodle/commit/da8e8cee6ffaf7c184eded97e1016f20c9de0561
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/da8e8cee6ffaf7c184eded97e1016f20c9de0561
14
reference_url https://github.com/moodle/moodle/commit/dc84fcfab06a4a0fe37797b8422e9fe3a1031c3e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dc84fcfab06a4a0fe37797b8422e9fe3a1031c3e
15
reference_url https://github.com/moodle/moodle/commit/e1dab5f38166a2ff62983178f7bf8f0ed3a61090
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e1dab5f38166a2ff62983178f7bf8f0ed3a61090
16
reference_url https://github.com/moodle/moodle/commit/e23f603c41055ab92f9b430cf0e7a54b4e120f95
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e23f603c41055ab92f9b430cf0e7a54b4e120f95
17
reference_url https://github.com/moodle/moodle/commit/f2807dee5bc777d9c58b7a70cba6e4c21ee02ea1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/f2807dee5bc777d9c58b7a70cba6e4c21ee02ea1
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
20
reference_url https://moodle.org/mod/forum/discuss.php?d=459501
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/
url https://moodle.org/mod/forum/discuss.php?d=459501
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38276
reference_id CVE-2024-38276
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38276
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
23
reference_url https://github.com/advisories/GHSA-356g-7x36-7m34
reference_id GHSA-356g-7x36-7m34
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-356g-7x36-7m34
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.11
purl pkg:composer/moodle/moodle@4.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-d92c-j4yy-fud3
24
vulnerability VCID-dky9-v96e-pubh
25
vulnerability VCID-f1da-1duc-2uhb
26
vulnerability VCID-ffp4-23na-rkgr
27
vulnerability VCID-g3km-hbas-x3cg
28
vulnerability VCID-gwnb-e3gt-kqcb
29
vulnerability VCID-gzdw-424p-mqfa
30
vulnerability VCID-hufb-p6pa-63c9
31
vulnerability VCID-j3ts-5ghc-4qct
32
vulnerability VCID-m2a7-q28u-1yfw
33
vulnerability VCID-m3jj-r66a-d7cv
34
vulnerability VCID-m9tk-fa8m-zbah
35
vulnerability VCID-mnx8-118d-efcr
36
vulnerability VCID-pd2f-4kxt-bkgp
37
vulnerability VCID-qruy-fs4p-43h1
38
vulnerability VCID-r4m3-9prr-dkby
39
vulnerability VCID-r5w9-cbyk-hqc6
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-ueyy-v42v-7ydh
44
vulnerability VCID-vsrk-zp7j-w7bk
45
vulnerability VCID-vve8-f9s9-v7ft
46
vulnerability VCID-wby4-h9ud-1yh5
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-yby1-g45r-rugg
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-zjqu-hbpf-9qe1
54
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11
1
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
2
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
3
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38276, GHSA-356g-7x36-7m34
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ajrr-8392-kkcw
33
url VCID-b3vw-8hzh-dybx
vulnerability_id VCID-b3vw-8hzh-dybx
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34005
reference_id
reference_type
scores
0
value 0.00445
scoring_system epss
scoring_elements 0.6377
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34005
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/ffa045e09912349ed08d6591ec84cb83e57235cc
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ffa045e09912349ed08d6591ec84cb83e57235cc
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458394
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T19:36:05Z/
url https://moodle.org/mod/forum/discuss.php?d=458394
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34005
reference_id CVE-2024-34005
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34005
5
reference_url https://github.com/advisories/GHSA-r99q-hmqv-xw8w
reference_id GHSA-r99q-hmqv-xw8w
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r99q-hmqv-xw8w
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34005, GHSA-r99q-hmqv-xw8w
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b3vw-8hzh-dybx
34
url VCID-d92c-j4yy-fud3
vulnerability_id VCID-d92c-j4yy-fud3
summary 
Moodle authorization headers preserved between "emulated redirects"
A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43432
reference_id
reference_type
scores
0
value 0.00336
scoring_system epss
scoring_elements 0.56755
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43432
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304260
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:06:57Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304260
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461200
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:06:57Z/
url https://moodle.org/mod/forum/discuss.php?d=461200
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43432
reference_id CVE-2024-43432
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43432
6
reference_url https://github.com/advisories/GHSA-7wmp-2xmx-g6h8
reference_id GHSA-7wmp-2xmx-g6h8
reference_type
scores
url https://github.com/advisories/GHSA-7wmp-2xmx-g6h8
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43432, GHSA-7wmp-2xmx-g6h8
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d92c-j4yy-fud3
35
url VCID-dky9-v96e-pubh
vulnerability_id VCID-dky9-v96e-pubh
summary 
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3641
reference_id
reference_type
scores
0
value 0.00667
scoring_system epss
scoring_elements 0.71699
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3641
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359735
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359735
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/27b839b5c60389623ca8e3496792b43a44527cd6
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467602
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/
url https://moodle.org/mod/forum/discuss.php?d=467602
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3641
reference_id CVE-2025-3641
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:41Z/
url https://access.redhat.com/security/cve/CVE-2025-3641
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3641
reference_id CVE-2025-3641
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3641
7
reference_url https://github.com/advisories/GHSA-c8v6-vxhf-wcrr
reference_id GHSA-c8v6-vxhf-wcrr
reference_type
scores
url https://github.com/advisories/GHSA-c8v6-vxhf-wcrr
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3641, GHSA-c8v6-vxhf-wcrr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dky9-v96e-pubh
36
url VCID-dp61-6ban-cyda
vulnerability_id VCID-dp61-6ban-cyda
summary 
Cross-site Scripting in Moodle Chat
The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle."
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-28593
reference_id
reference_type
scores
0
value 0.00142
scoring_system epss
scoring_elements 0.34174
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-28593
1
reference_url https://docs.moodle.org/403/en/Using_Chat
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-25T16:47:10Z/
url https://docs.moodle.org/403/en/Using_Chat
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-25T16:47:10Z/
url https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-28593
reference_id CVE-2024-28593
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-28593
5
reference_url https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt
reference_id CVE-2024-28593.TXT
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-25T16:47:10Z/
url https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt
6
reference_url https://github.com/advisories/GHSA-f6mh-79vh-2hv7
reference_id GHSA-f6mh-79vh-2hv7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f6mh-79vh-2hv7
fixed_packages
aliases CVE-2024-28593, GHSA-f6mh-79vh-2hv7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dp61-6ban-cyda
37
url VCID-evef-t6cx-vqcc
vulnerability_id VCID-evef-t6cx-vqcc
summary 
Moodle broken access control when setting calendar event type
Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81247
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81247
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-33996
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38823
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-33996
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458384#p1840909
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-01T13:14:42Z/
url https://moodle.org/mod/forum/discuss.php?d=458384#p1840909
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-33996
reference_id CVE-2024-33996
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-33996
5
reference_url https://github.com/advisories/GHSA-4qww-rxq6-x7gf
reference_id GHSA-4qww-rxq6-x7gf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4qww-rxq6-x7gf
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-33996, GHSA-4qww-rxq6-x7gf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-evef-t6cx-vqcc
38
url VCID-f1da-1duc-2uhb
vulnerability_id VCID-f1da-1duc-2uhb
summary 
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67853
reference_id
reference_type
scores
0
value 0.00035
scoring_system epss
scoring_elements 0.10917
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67853
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423847
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:42Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423847
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=471303
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471303
4
reference_url https://access.redhat.com/security/cve/CVE-2025-67853
reference_id CVE-2025-67853
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:42Z/
url https://access.redhat.com/security/cve/CVE-2025-67853
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67853
reference_id CVE-2025-67853
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67853
6
reference_url https://github.com/advisories/GHSA-5cx4-w4fh-fr57
reference_id GHSA-5cx4-w4fh-fr57
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5cx4-w4fh-fr57
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67853, GHSA-5cx4-w4fh-fr57
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f1da-1duc-2uhb
39
url VCID-ffp4-23na-rkgr
vulnerability_id VCID-ffp4-23na-rkgr
summary 
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3642
reference_id
reference_type
scores
0
value 0.00667
scoring_system epss
scoring_elements 0.71699
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3642
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359738
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359738
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/630fbf6230ee18d63ce69bea34173fb151b599da
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467603
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/
url https://moodle.org/mod/forum/discuss.php?d=467603
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3642
reference_id CVE-2025-3642
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:38:37Z/
url https://access.redhat.com/security/cve/CVE-2025-3642
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3642
reference_id CVE-2025-3642
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3642
7
reference_url https://github.com/advisories/GHSA-m367-445c-2xqr
reference_id GHSA-m367-445c-2xqr
reference_type
scores
url https://github.com/advisories/GHSA-m367-445c-2xqr
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3642, GHSA-m367-445c-2xqr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ffp4-23na-rkgr
40
url VCID-g3km-hbas-x3cg
vulnerability_id VCID-g3km-hbas-x3cg
summary 
Moodle has arbitrary file read risk through pdfTeX
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43426
reference_id
reference_type
scores
0
value 0.00911
scoring_system epss
scoring_elements 0.76223
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43426
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304254
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:41:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304254
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461194
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:41:10Z/
url https://moodle.org/mod/forum/discuss.php?d=461194
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43426
reference_id CVE-2024-43426
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43426
6
reference_url https://github.com/advisories/GHSA-vjmm-r9gg-425m
reference_id GHSA-vjmm-r9gg-425m
reference_type
scores
url https://github.com/advisories/GHSA-vjmm-r9gg-425m
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43426, GHSA-vjmm-r9gg-425m
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g3km-hbas-x3cg
41
url VCID-gwnb-e3gt-kqcb
vulnerability_id VCID-gwnb-e3gt-kqcb
summary 
Moodle allows teachers to evade trusttext config when restoring glossary entries
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:04Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84003
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26532
reference_id
reference_type
scores
0
value 0.00345
scoring_system epss
scoring_elements 0.57354
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26532
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466149
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:19:04Z/
url https://moodle.org/mod/forum/discuss.php?d=466149
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26532
reference_id CVE-2025-26532
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26532
5
reference_url https://github.com/advisories/GHSA-cw24-f6fq-7j9v
reference_id GHSA-cw24-f6fq-7j9v
reference_type
scores
url https://github.com/advisories/GHSA-cw24-f6fq-7j9v
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26532, GHSA-cw24-f6fq-7j9v
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gwnb-e3gt-kqcb
42
url VCID-gycn-bey2-4yam
vulnerability_id VCID-gycn-bey2-4yam
summary 
Improper Access Control in moodle
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80501
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80501
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25980
reference_id
reference_type
scores
0
value 0.00167
scoring_system epss
scoring_elements 0.3759
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25980
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264096
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264096
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/662192fcecdefdaae79f55db96bd64dbcdeef85b
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/662192fcecdefdaae79f55db96bd64dbcdeef85b
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455636
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url https://moodle.org/mod/forum/discuss.php?d=455636
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25980
reference_id CVE-2024-25980
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25980
8
reference_url https://github.com/advisories/GHSA-cp8m-h777-g4p3
reference_id GHSA-cp8m-h777-g4p3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cp8m-h777-g4p3
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.9
purl pkg:composer/moodle/moodle@4.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6cvg-r9am-wbh5
19
vulnerability VCID-6p1s-2r14-z7ax
20
vulnerability VCID-7p54-yn8k-aydw
21
vulnerability VCID-7trf-g8dq-tua1
22
vulnerability VCID-893t-9cja-43g2
23
vulnerability VCID-8uah-srba-6ubb
24
vulnerability VCID-9rqr-xzr8-5fgf
25
vulnerability VCID-9xk9-qb9x-jfcs
26
vulnerability VCID-a1ek-x154-5ydy
27
vulnerability VCID-ajrr-8392-kkcw
28
vulnerability VCID-b3vw-8hzh-dybx
29
vulnerability VCID-d92c-j4yy-fud3
30
vulnerability VCID-dky9-v96e-pubh
31
vulnerability VCID-dp61-6ban-cyda
32
vulnerability VCID-evef-t6cx-vqcc
33
vulnerability VCID-f1da-1duc-2uhb
34
vulnerability VCID-ffp4-23na-rkgr
35
vulnerability VCID-g3km-hbas-x3cg
36
vulnerability VCID-gwnb-e3gt-kqcb
37
vulnerability VCID-gzdw-424p-mqfa
38
vulnerability VCID-hmuw-bjax-37bz
39
vulnerability VCID-hufb-p6pa-63c9
40
vulnerability VCID-j3ts-5ghc-4qct
41
vulnerability VCID-jkyc-esnt-p3ay
42
vulnerability VCID-m2a7-q28u-1yfw
43
vulnerability VCID-m3jj-r66a-d7cv
44
vulnerability VCID-m9tk-fa8m-zbah
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-pd2f-4kxt-bkgp
48
vulnerability VCID-pged-191y-quhm
49
vulnerability VCID-qruy-fs4p-43h1
50
vulnerability VCID-r4m3-9prr-dkby
51
vulnerability VCID-r5w9-cbyk-hqc6
52
vulnerability VCID-rm2q-xde7-a3ej
53
vulnerability VCID-sdxf-f1b3-t3cc
54
vulnerability VCID-sgdq-5ha7-nfh2
55
vulnerability VCID-t8vm-tfnq-5kak
56
vulnerability VCID-team-9wba-yufc
57
vulnerability VCID-tgs8-3n7x-cyc1
58
vulnerability VCID-ueyy-v42v-7ydh
59
vulnerability VCID-umd1-pmr4-4bgs
60
vulnerability VCID-vsrk-zp7j-w7bk
61
vulnerability VCID-vve8-f9s9-v7ft
62
vulnerability VCID-wby4-h9ud-1yh5
63
vulnerability VCID-wwny-t2ez-y3e1
64
vulnerability VCID-wwx4-ns21-k3hd
65
vulnerability VCID-wytb-bryq-yqb4
66
vulnerability VCID-y4g2-328f-qbge
67
vulnerability VCID-yby1-g45r-rugg
68
vulnerability VCID-ykj6-ptd4-7qfs
69
vulnerability VCID-ytd5-2swj-wkh1
70
vulnerability VCID-z5u9-5522-h7fx
71
vulnerability VCID-zjqu-hbpf-9qe1
72
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.9
1
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
2
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25980, GHSA-cp8m-h777-g4p3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gycn-bey2-4yam
43
url VCID-gzdw-424p-mqfa
vulnerability_id VCID-gzdw-424p-mqfa
summary 
Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block
Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:57:30Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-83941
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26527
reference_id
reference_type
scores
0
value 0.00365
scoring_system epss
scoring_elements 0.58836
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26527
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466143
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:57:30Z/
url https://moodle.org/mod/forum/discuss.php?d=466143
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26527
reference_id CVE-2025-26527
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26527
5
reference_url https://github.com/advisories/GHSA-5r85-6h7f-rg3r
reference_id GHSA-5r85-6h7f-rg3r
reference_type
scores
url https://github.com/advisories/GHSA-5r85-6h7f-rg3r
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26527, GHSA-5r85-6h7f-rg3r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gzdw-424p-mqfa
44
url VCID-heb8-damy-47e5
vulnerability_id VCID-heb8-damy-47e5
summary 
Moodle has Incorrect Default Permissions
In Moodle, insufficient capability checks meant message deletions were not limited to the current user.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36397
reference_id
reference_type
scores
0
value 0.00272
scoring_system epss
scoring_elements 0.50785
published_at 2026-06-04T12:55:00Z
1
value 0.00272
scoring_system epss
scoring_elements 0.50845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36397
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424803
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:59:19Z/
url https://moodle.org/mod/forum/discuss.php?d=424803
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36397
reference_id CVE-2021-36397
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36397
4
reference_url https://github.com/advisories/GHSA-2wmj-8mqg-r9q8
reference_id GHSA-2wmj-8mqg-r9q8
reference_type
scores
url https://github.com/advisories/GHSA-2wmj-8mqg-r9q8
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36397, GHSA-2wmj-8mqg-r9q8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-heb8-damy-47e5
45
url VCID-hkef-37rz-4baf
vulnerability_id VCID-hkef-37rz-4baf
summary 
Moodle Cross-site Scripting vulnerability
In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36399
reference_id
reference_type
scores
0
value 0.00823
scoring_system epss
scoring_elements 0.74791
published_at 2026-06-04T12:55:00Z
1
value 0.00823
scoring_system epss
scoring_elements 0.74822
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36399
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424805
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:13:24Z/
url https://moodle.org/mod/forum/discuss.php?d=424805
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36399
reference_id CVE-2021-36399
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36399
4
reference_url https://github.com/advisories/GHSA-79jp-m64f-pgrc
reference_id GHSA-79jp-m64f-pgrc
reference_type
scores
url https://github.com/advisories/GHSA-79jp-m64f-pgrc
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36399, GHSA-79jp-m64f-pgrc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkef-37rz-4baf
46
url VCID-hmuw-bjax-37bz
vulnerability_id VCID-hmuw-bjax-37bz
summary 
Moodle Cross-site Scripting (XSS)
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81354
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81354
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-33998
reference_id
reference_type
scores
0
value 0.01399
scoring_system epss
scoring_elements 0.80777
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-33998
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/66da9394993d97861f6c80bc4ec4ee9b513d2f33
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/66da9394993d97861f6c80bc4ec4ee9b513d2f33
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458386
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T14:26:53Z/
url https://moodle.org/mod/forum/discuss.php?d=458386
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-33998
reference_id CVE-2024-33998
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-33998
6
reference_url https://github.com/advisories/GHSA-xqhh-253w-4q5f
reference_id GHSA-xqhh-253w-4q5f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xqhh-253w-4q5f
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-33998, GHSA-xqhh-253w-4q5f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hmuw-bjax-37bz
47
url VCID-hufb-p6pa-63c9
vulnerability_id VCID-hufb-p6pa-63c9
summary 
Moodle has an authorization logic flaw
A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges they are not entitled to, potentially leading to privilege escalation or unauthorized access to certain features.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67856
reference_id
reference_type
scores
0
value 0.00022
scoring_system epss
scoring_elements 0.06512
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67856
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423864
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:42:42Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423864
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0d48779e61bcacbabbcb82858a037b567351fce0
4
reference_url https://moodle.org/mod/forum/discuss.php?d=471306
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471306
5
reference_url https://access.redhat.com/security/cve/CVE-2025-67856
reference_id CVE-2025-67856
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:42:42Z/
url https://access.redhat.com/security/cve/CVE-2025-67856
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67856
reference_id CVE-2025-67856
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67856
7
reference_url https://github.com/advisories/GHSA-hcm6-q6pc-xfhm
reference_id GHSA-hcm6-q6pc-xfhm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hcm6-q6pc-xfhm
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67856, GHSA-hcm6-q6pc-xfhm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hufb-p6pa-63c9
48
url VCID-hwnq-6kng-kkcx
vulnerability_id VCID-hwnq-6kng-kkcx
summary 
Moodle has a Hidden Functionality vulnerability
In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36403
reference_id
reference_type
scores
0
value 0.00297
scoring_system epss
scoring_elements 0.53302
published_at 2026-06-04T12:55:00Z
1
value 0.00297
scoring_system epss
scoring_elements 0.53363
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36403
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424809
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-07T17:58:43Z/
url https://moodle.org/mod/forum/discuss.php?d=424809
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36403
reference_id CVE-2021-36403
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36403
4
reference_url https://github.com/advisories/GHSA-j9cw-5cpj-9qj5
reference_id GHSA-j9cw-5cpj-9qj5
reference_type
scores
url https://github.com/advisories/GHSA-j9cw-5cpj-9qj5
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36403, GHSA-j9cw-5cpj-9qj5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hwnq-6kng-kkcx
49
url VCID-j3ts-5ghc-4qct
vulnerability_id VCID-j3ts-5ghc-4qct
summary 
Moodle has a Remote Code Execution risk via file restore
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26045
reference_id
reference_type
scores
0
value 0.00113
scoring_system epss
scoring_elements 0.29587
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26045
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440901
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2440901
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da
4
reference_url https://moodle.org/mod/forum/discuss.php?d=473314
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=473314
5
reference_url https://access.redhat.com/security/cve/CVE-2026-26045
reference_id CVE-2026-26045
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/
url https://access.redhat.com/security/cve/CVE-2026-26045
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26045
reference_id CVE-2026-26045
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26045
7
reference_url https://github.com/advisories/GHSA-ggxq-2mg9-8966
reference_id GHSA-ggxq-2mg9-8966
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ggxq-2mg9-8966
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.9
purl pkg:composer/moodle/moodle@4.5.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9
1
url pkg:composer/moodle/moodle@5.0.5
purl pkg:composer/moodle/moodle@5.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5
2
url pkg:composer/moodle/moodle@5.1.2
purl pkg:composer/moodle/moodle@5.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2
aliases CVE-2026-26045, GHSA-ggxq-2mg9-8966
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j3ts-5ghc-4qct
50
url VCID-jcq6-btgz-fkf6
vulnerability_id VCID-jcq6-btgz-fkf6
summary 
Cross-site Scripting
It was found in Moodle that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20183
reference_id
reference_type
scores
0
value 0.00455
scoring_system epss
scoring_elements 0.64171
published_at 2026-06-04T12:55:00Z
1
value 0.00455
scoring_system epss
scoring_elements 0.64216
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20183
1
reference_url https://github.com/moodle/moodle/commit/dc9de7b0d487b73c23c221dc0b8b6e01654921f3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dc9de7b0d487b73c23c221dc0b8b6e01654921f3
2
reference_url https://moodle.org/mod/forum/discuss.php?d=417166
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=417166
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20183
reference_id CVE-2021-20183
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20183
4
reference_url https://github.com/advisories/GHSA-xhfx-rm8q-c3xv
reference_id GHSA-xhfx-rm8q-c3xv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xhfx-rm8q-c3xv
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.1
purl pkg:composer/moodle/moodle@3.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2cdg-m3pq-ufe5
9
vulnerability VCID-2gtq-u4jg-4uck
10
vulnerability VCID-2jta-hqah-d7cf
11
vulnerability VCID-2urf-d2qr-abdy
12
vulnerability VCID-2wsu-7rzh-h7cs
13
vulnerability VCID-3mgk-4c3z-sudt
14
vulnerability VCID-3nu2-1cwj-sfdd
15
vulnerability VCID-3nvq-s7y5-fufr
16
vulnerability VCID-3yre-ft3n-2fd3
17
vulnerability VCID-44zf-1dw7-qkf5
18
vulnerability VCID-4spj-h1cc-rbfg
19
vulnerability VCID-4zvp-nmrk-4qbq
20
vulnerability VCID-57wg-wxss-jbaw
21
vulnerability VCID-5ba5-pee7-6kh1
22
vulnerability VCID-5s33-v19s-sqd6
23
vulnerability VCID-5snb-dyv3-efe9
24
vulnerability VCID-5xhb-mx3v-fuhs
25
vulnerability VCID-61ry-zz34-8qhj
26
vulnerability VCID-657g-68tv-dkam
27
vulnerability VCID-6726-ca8y-4uez
28
vulnerability VCID-6cvg-r9am-wbh5
29
vulnerability VCID-6p1s-2r14-z7ax
30
vulnerability VCID-6rc8-bs9z-5bb2
31
vulnerability VCID-7p54-yn8k-aydw
32
vulnerability VCID-7trf-g8dq-tua1
33
vulnerability VCID-893t-9cja-43g2
34
vulnerability VCID-8bzr-1mub-3ffq
35
vulnerability VCID-8uah-srba-6ubb
36
vulnerability VCID-95f1-6g3r-rkg4
37
vulnerability VCID-9rqr-xzr8-5fgf
38
vulnerability VCID-9xk9-qb9x-jfcs
39
vulnerability VCID-a1ek-x154-5ydy
40
vulnerability VCID-ajrr-8392-kkcw
41
vulnerability VCID-b3vw-8hzh-dybx
42
vulnerability VCID-bbj9-hpz3-xqhh
43
vulnerability VCID-bhfv-dn14-ukfs
44
vulnerability VCID-bju3-sj3y-83e3
45
vulnerability VCID-bu6d-ns3s-fuck
46
vulnerability VCID-cp4k-uz4a-ukh6
47
vulnerability VCID-cs5n-4bst-zfcj
48
vulnerability VCID-d92c-j4yy-fud3
49
vulnerability VCID-dky9-v96e-pubh
50
vulnerability VCID-dp61-6ban-cyda
51
vulnerability VCID-dpd2-1sqc-qqfy
52
vulnerability VCID-efq2-s2df-pqa1
53
vulnerability VCID-evef-t6cx-vqcc
54
vulnerability VCID-f1da-1duc-2uhb
55
vulnerability VCID-ffp4-23na-rkgr
56
vulnerability VCID-g3km-hbas-x3cg
57
vulnerability VCID-g9f7-787g-vyem
58
vulnerability VCID-gnez-ehgq-rfbr
59
vulnerability VCID-gwnb-e3gt-kqcb
60
vulnerability VCID-gycn-bey2-4yam
61
vulnerability VCID-gzdw-424p-mqfa
62
vulnerability VCID-heb8-damy-47e5
63
vulnerability VCID-hk13-uc46-87h1
64
vulnerability VCID-hkef-37rz-4baf
65
vulnerability VCID-hmuw-bjax-37bz
66
vulnerability VCID-hufb-p6pa-63c9
67
vulnerability VCID-hwnq-6kng-kkcx
68
vulnerability VCID-j1s3-fyue-2kfy
69
vulnerability VCID-j21p-heue-nqd9
70
vulnerability VCID-j3ts-5ghc-4qct
71
vulnerability VCID-jkyc-esnt-p3ay
72
vulnerability VCID-m2a7-q28u-1yfw
73
vulnerability VCID-m3jj-r66a-d7cv
74
vulnerability VCID-m9tk-fa8m-zbah
75
vulnerability VCID-mhh7-n7ut-hkh6
76
vulnerability VCID-mnx8-118d-efcr
77
vulnerability VCID-mqde-66zm-qbbj
78
vulnerability VCID-ms4e-v5zc-9kgc
79
vulnerability VCID-n7d3-j3jn-rqfc
80
vulnerability VCID-nxy4-wr2t-e7fw
81
vulnerability VCID-p3ge-1cqt-tufw
82
vulnerability VCID-pd2f-4kxt-bkgp
83
vulnerability VCID-pged-191y-quhm
84
vulnerability VCID-pgfa-bkaw-q7cq
85
vulnerability VCID-qabh-bpmn-1ye5
86
vulnerability VCID-qfvz-hf8h-8bb3
87
vulnerability VCID-qruy-fs4p-43h1
88
vulnerability VCID-qw4y-q2gg-akea
89
vulnerability VCID-r1ug-e8x6-83gt
90
vulnerability VCID-r4m3-9prr-dkby
91
vulnerability VCID-r5w9-cbyk-hqc6
92
vulnerability VCID-rm2q-xde7-a3ej
93
vulnerability VCID-ry6t-xcsq-4bf2
94
vulnerability VCID-rzbf-yc44-6bdb
95
vulnerability VCID-sca8-zx4m-sub6
96
vulnerability VCID-sdxf-f1b3-t3cc
97
vulnerability VCID-sgdq-5ha7-nfh2
98
vulnerability VCID-t8vm-tfnq-5kak
99
vulnerability VCID-taab-hupu-huf9
100
vulnerability VCID-tb5z-bfmc-zkgh
101
vulnerability VCID-team-9wba-yufc
102
vulnerability VCID-tgs8-3n7x-cyc1
103
vulnerability VCID-u32t-89zc-v3gj
104
vulnerability VCID-ueyy-v42v-7ydh
105
vulnerability VCID-uhc9-p93a-gbau
106
vulnerability VCID-umd1-pmr4-4bgs
107
vulnerability VCID-vsrk-zp7j-w7bk
108
vulnerability VCID-vve8-f9s9-v7ft
109
vulnerability VCID-wby4-h9ud-1yh5
110
vulnerability VCID-wwny-t2ez-y3e1
111
vulnerability VCID-wwx4-ns21-k3hd
112
vulnerability VCID-wytb-bryq-yqb4
113
vulnerability VCID-xh4x-t7he-pufq
114
vulnerability VCID-y4g2-328f-qbge
115
vulnerability VCID-yby1-g45r-rugg
116
vulnerability VCID-yc6t-am1p-x3ev
117
vulnerability VCID-yenj-fv96-pbd7
118
vulnerability VCID-ykj6-ptd4-7qfs
119
vulnerability VCID-ytd5-2swj-wkh1
120
vulnerability VCID-z29a-xpcq-p7ct
121
vulnerability VCID-z5u9-5522-h7fx
122
vulnerability VCID-zf4q-a4cz-y7dh
123
vulnerability VCID-zjqu-hbpf-9qe1
124
vulnerability VCID-zrjj-atms-8uf9
125
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.1
1
url pkg:composer/moodle/moodle@4.0.0-beta
purl pkg:composer/moodle/moodle@4.0.0-beta
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6726-ca8y-4uez
19
vulnerability VCID-6cvg-r9am-wbh5
20
vulnerability VCID-6p1s-2r14-z7ax
21
vulnerability VCID-7p54-yn8k-aydw
22
vulnerability VCID-7trf-g8dq-tua1
23
vulnerability VCID-893t-9cja-43g2
24
vulnerability VCID-8uah-srba-6ubb
25
vulnerability VCID-9rqr-xzr8-5fgf
26
vulnerability VCID-9xk9-qb9x-jfcs
27
vulnerability VCID-a1ek-x154-5ydy
28
vulnerability VCID-ajrr-8392-kkcw
29
vulnerability VCID-b3vw-8hzh-dybx
30
vulnerability VCID-d92c-j4yy-fud3
31
vulnerability VCID-dky9-v96e-pubh
32
vulnerability VCID-dp61-6ban-cyda
33
vulnerability VCID-evef-t6cx-vqcc
34
vulnerability VCID-f1da-1duc-2uhb
35
vulnerability VCID-ffp4-23na-rkgr
36
vulnerability VCID-g3km-hbas-x3cg
37
vulnerability VCID-gwnb-e3gt-kqcb
38
vulnerability VCID-gycn-bey2-4yam
39
vulnerability VCID-gzdw-424p-mqfa
40
vulnerability VCID-hmuw-bjax-37bz
41
vulnerability VCID-hufb-p6pa-63c9
42
vulnerability VCID-j3ts-5ghc-4qct
43
vulnerability VCID-jkyc-esnt-p3ay
44
vulnerability VCID-m2a7-q28u-1yfw
45
vulnerability VCID-m3jj-r66a-d7cv
46
vulnerability VCID-m9tk-fa8m-zbah
47
vulnerability VCID-mhh7-n7ut-hkh6
48
vulnerability VCID-mnx8-118d-efcr
49
vulnerability VCID-ms4e-v5zc-9kgc
50
vulnerability VCID-pd2f-4kxt-bkgp
51
vulnerability VCID-pged-191y-quhm
52
vulnerability VCID-qabh-bpmn-1ye5
53
vulnerability VCID-qruy-fs4p-43h1
54
vulnerability VCID-r1ug-e8x6-83gt
55
vulnerability VCID-r4m3-9prr-dkby
56
vulnerability VCID-r5w9-cbyk-hqc6
57
vulnerability VCID-rm2q-xde7-a3ej
58
vulnerability VCID-sdxf-f1b3-t3cc
59
vulnerability VCID-sgdq-5ha7-nfh2
60
vulnerability VCID-t8vm-tfnq-5kak
61
vulnerability VCID-team-9wba-yufc
62
vulnerability VCID-tgs8-3n7x-cyc1
63
vulnerability VCID-ueyy-v42v-7ydh
64
vulnerability VCID-uhc9-p93a-gbau
65
vulnerability VCID-umd1-pmr4-4bgs
66
vulnerability VCID-vsrk-zp7j-w7bk
67
vulnerability VCID-vve8-f9s9-v7ft
68
vulnerability VCID-wby4-h9ud-1yh5
69
vulnerability VCID-wwny-t2ez-y3e1
70
vulnerability VCID-wwx4-ns21-k3hd
71
vulnerability VCID-wytb-bryq-yqb4
72
vulnerability VCID-y4g2-328f-qbge
73
vulnerability VCID-yby1-g45r-rugg
74
vulnerability VCID-yc6t-am1p-x3ev
75
vulnerability VCID-ykj6-ptd4-7qfs
76
vulnerability VCID-ytd5-2swj-wkh1
77
vulnerability VCID-z5u9-5522-h7fx
78
vulnerability VCID-zjqu-hbpf-9qe1
79
vulnerability VCID-zrjj-atms-8uf9
80
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.0.0-beta
aliases CVE-2021-20183, GHSA-xhfx-rm8q-c3xv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jcq6-btgz-fkf6
51
url VCID-jkyc-esnt-p3ay
vulnerability_id VCID-jkyc-esnt-p3ay
summary 
Moodle CSRF risk in analytics management of models
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81059
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81059
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34008
reference_id
reference_type
scores
0
value 0.00361
scoring_system epss
scoring_elements 0.58549
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34008
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/498a766263743ee649f6874e440a94517a077e2e
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/498a766263743ee649f6874e440a94517a077e2e
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458397
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-05T19:22:27Z/
url https://moodle.org/mod/forum/discuss.php?d=458397
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34008
reference_id CVE-2024-34008
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34008
6
reference_url https://github.com/advisories/GHSA-68x5-4jg5-gjgg
reference_id GHSA-68x5-4jg5-gjgg
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-68x5-4jg5-gjgg
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34008, GHSA-68x5-4jg5-gjgg
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jkyc-esnt-p3ay
52
url VCID-m2a7-q28u-1yfw
vulnerability_id VCID-m2a7-q28u-1yfw
summary 
Moodle vulnerable to brute-force password guesses
Moodle's mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62399
reference_id
reference_type
scores
0
value 0.00088
scoring_system epss
scoring_elements 0.25243
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62399
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404432
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404432
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470388
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470388
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62399
reference_id CVE-2025-62399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/
url https://access.redhat.com/security/cve/CVE-2025-62399
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62399
reference_id CVE-2025-62399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62399
7
reference_url https://github.com/advisories/GHSA-m58f-9pvv-8mp2
reference_id GHSA-m58f-9pvv-8mp2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m58f-9pvv-8mp2
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.21
purl pkg:composer/moodle/moodle@4.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.21
1
url pkg:composer/moodle/moodle@4.4.11
purl pkg:composer/moodle/moodle@4.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11
2
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
3
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62399, GHSA-m58f-9pvv-8mp2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m2a7-q28u-1yfw
53
url VCID-m3jj-r66a-d7cv
vulnerability_id VCID-m3jj-r66a-d7cv
summary 
Moodle vulnerable to cache poisoning via injection into storage
To address a cache poisoning risk in Moodle, additional validation for local storage was required.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81718
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81718
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43428
reference_id
reference_type
scores
0
value 0.00058
scoring_system epss
scoring_elements 0.18476
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43428
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304256
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:01Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304256
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461196
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:01Z/
url https://moodle.org/mod/forum/discuss.php?d=461196
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43428
reference_id CVE-2024-43428
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43428
6
reference_url https://github.com/advisories/GHSA-2r9m-wg35-rfvc
reference_id GHSA-2r9m-wg35-rfvc
reference_type
scores
url https://github.com/advisories/GHSA-2r9m-wg35-rfvc
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43428, GHSA-2r9m-wg35-rfvc
risk_score 3.5
exploitability 0.5
weighted_severity 6.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m3jj-r66a-d7cv
54
url VCID-m9tk-fa8m-zbah
vulnerability_id VCID-m9tk-fa8m-zbah
summary 
Moodle LFI vulnerability when restoring malformed block backups
A flaw was found in moodle. A local file may include risks when restoring block backups.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43440
reference_id
reference_type
scores
0
value 0.00334
scoring_system epss
scoring_elements 0.56485
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43440
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304269
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:23:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304269
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461210
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:23:21Z/
url https://moodle.org/mod/forum/discuss.php?d=461210
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43440
reference_id CVE-2024-43440
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43440
5
reference_url https://github.com/advisories/GHSA-qrqv-26gf-xgwh
reference_id GHSA-qrqv-26gf-xgwh
reference_type
scores
url https://github.com/advisories/GHSA-qrqv-26gf-xgwh
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43440, GHSA-qrqv-26gf-xgwh
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m9tk-fa8m-zbah
55
url VCID-mhh7-n7ut-hkh6
vulnerability_id VCID-mhh7-n7ut-hkh6
summary 
Improper Handling of Parameters in moodle
The URL parameters accepted by forum search were not limited to the allowed parameters.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69774
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69774
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25979
reference_id
reference_type
scores
0
value 0.00163
scoring_system epss
scoring_elements 0.37048
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25979
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264095
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264095
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/6eaeeda6cf759672def05a85afe9e4d521739166
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/6eaeeda6cf759672def05a85afe9e4d521739166
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455635
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url https://moodle.org/mod/forum/discuss.php?d=455635
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25979
reference_id CVE-2024-25979
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25979
8
reference_url https://github.com/advisories/GHSA-6vjf-48fh-vxxj
reference_id GHSA-6vjf-48fh-vxxj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6vjf-48fh-vxxj
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.9
purl pkg:composer/moodle/moodle@4.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6cvg-r9am-wbh5
19
vulnerability VCID-6p1s-2r14-z7ax
20
vulnerability VCID-7p54-yn8k-aydw
21
vulnerability VCID-7trf-g8dq-tua1
22
vulnerability VCID-893t-9cja-43g2
23
vulnerability VCID-8uah-srba-6ubb
24
vulnerability VCID-9rqr-xzr8-5fgf
25
vulnerability VCID-9xk9-qb9x-jfcs
26
vulnerability VCID-a1ek-x154-5ydy
27
vulnerability VCID-ajrr-8392-kkcw
28
vulnerability VCID-b3vw-8hzh-dybx
29
vulnerability VCID-d92c-j4yy-fud3
30
vulnerability VCID-dky9-v96e-pubh
31
vulnerability VCID-dp61-6ban-cyda
32
vulnerability VCID-evef-t6cx-vqcc
33
vulnerability VCID-f1da-1duc-2uhb
34
vulnerability VCID-ffp4-23na-rkgr
35
vulnerability VCID-g3km-hbas-x3cg
36
vulnerability VCID-gwnb-e3gt-kqcb
37
vulnerability VCID-gzdw-424p-mqfa
38
vulnerability VCID-hmuw-bjax-37bz
39
vulnerability VCID-hufb-p6pa-63c9
40
vulnerability VCID-j3ts-5ghc-4qct
41
vulnerability VCID-jkyc-esnt-p3ay
42
vulnerability VCID-m2a7-q28u-1yfw
43
vulnerability VCID-m3jj-r66a-d7cv
44
vulnerability VCID-m9tk-fa8m-zbah
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-pd2f-4kxt-bkgp
48
vulnerability VCID-pged-191y-quhm
49
vulnerability VCID-qruy-fs4p-43h1
50
vulnerability VCID-r4m3-9prr-dkby
51
vulnerability VCID-r5w9-cbyk-hqc6
52
vulnerability VCID-rm2q-xde7-a3ej
53
vulnerability VCID-sdxf-f1b3-t3cc
54
vulnerability VCID-sgdq-5ha7-nfh2
55
vulnerability VCID-t8vm-tfnq-5kak
56
vulnerability VCID-team-9wba-yufc
57
vulnerability VCID-tgs8-3n7x-cyc1
58
vulnerability VCID-ueyy-v42v-7ydh
59
vulnerability VCID-umd1-pmr4-4bgs
60
vulnerability VCID-vsrk-zp7j-w7bk
61
vulnerability VCID-vve8-f9s9-v7ft
62
vulnerability VCID-wby4-h9ud-1yh5
63
vulnerability VCID-wwny-t2ez-y3e1
64
vulnerability VCID-wwx4-ns21-k3hd
65
vulnerability VCID-wytb-bryq-yqb4
66
vulnerability VCID-y4g2-328f-qbge
67
vulnerability VCID-yby1-g45r-rugg
68
vulnerability VCID-ykj6-ptd4-7qfs
69
vulnerability VCID-ytd5-2swj-wkh1
70
vulnerability VCID-z5u9-5522-h7fx
71
vulnerability VCID-zjqu-hbpf-9qe1
72
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.9
1
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
2
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25979, GHSA-6vjf-48fh-vxxj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mhh7-n7ut-hkh6
56
url VCID-mnx8-118d-efcr
vulnerability_id VCID-mnx8-118d-efcr
summary 
moodle: IDOR in edit/delete RSS feed
A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48897
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48897
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318821
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:51:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318821
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48897
reference_id CVE-2024-48897
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48897
4
reference_url https://github.com/advisories/GHSA-x3x9-349x-2485
reference_id GHSA-x3x9-349x-2485
reference_type
scores
url https://github.com/advisories/GHSA-x3x9-349x-2485
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.14
purl pkg:composer/moodle/moodle@4.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-gwnb-e3gt-kqcb
19
vulnerability VCID-gzdw-424p-mqfa
20
vulnerability VCID-hufb-p6pa-63c9
21
vulnerability VCID-j3ts-5ghc-4qct
22
vulnerability VCID-m2a7-q28u-1yfw
23
vulnerability VCID-pd2f-4kxt-bkgp
24
vulnerability VCID-sgdq-5ha7-nfh2
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vve8-f9s9-v7ft
27
vulnerability VCID-wby4-h9ud-1yh5
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-yby1-g45r-rugg
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-zjqu-hbpf-9qe1
33
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14
1
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
2
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
3
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48897, GHSA-x3x9-349x-2485
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnx8-118d-efcr
57
url VCID-ms4e-v5zc-9kgc
vulnerability_id VCID-ms4e-v5zc-9kgc
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81135
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81135
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34002
reference_id
reference_type
scores
0
value 0.00445
scoring_system epss
scoring_elements 0.6377
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34002
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458390
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:56:11Z/
url https://moodle.org/mod/forum/discuss.php?d=458390
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34002
reference_id CVE-2024-34002
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34002
5
reference_url https://github.com/advisories/GHSA-mm9p-xwfm-3fqf
reference_id GHSA-mm9p-xwfm-3fqf
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mm9p-xwfm-3fqf
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34002, GHSA-mm9p-xwfm-3fqf
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ms4e-v5zc-9kgc
58
url VCID-nxy4-wr2t-e7fw
vulnerability_id VCID-nxy4-wr2t-e7fw
summary 
Moodle Session Fixation vulnerability
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36394
reference_id
reference_type
scores
0
value 0.11647
scoring_system epss
scoring_elements 0.93794
published_at 2026-06-04T12:55:00Z
1
value 0.11647
scoring_system epss
scoring_elements 0.93803
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36394
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424799
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=424799
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36394
reference_id CVE-2021-36394
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36394
4
reference_url https://github.com/advisories/GHSA-2563-fp9c-mgm8
reference_id GHSA-2563-fp9c-mgm8
reference_type
scores
url https://github.com/advisories/GHSA-2563-fp9c-mgm8
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36394, GHSA-2563-fp9c-mgm8
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nxy4-wr2t-e7fw
59
url VCID-pd2f-4kxt-bkgp
vulnerability_id VCID-pd2f-4kxt-bkgp
summary 
Moodle's feedback response viewing and deletions did not respect Separate Groups mode
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback
activities.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:58:41Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26526
reference_id
reference_type
scores
0
value 0.00381
scoring_system epss
scoring_elements 0.59868
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26526
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466142
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-24T19:58:41Z/
url https://moodle.org/mod/forum/discuss.php?d=466142
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26526
reference_id CVE-2025-26526
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26526
5
reference_url https://github.com/advisories/GHSA-pxg4-xjp7-w9c5
reference_id GHSA-pxg4-xjp7-w9c5
reference_type
scores
url https://github.com/advisories/GHSA-pxg4-xjp7-w9c5
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26526, GHSA-pxg4-xjp7-w9c5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pd2f-4kxt-bkgp
60
url VCID-pged-191y-quhm
vulnerability_id VCID-pged-191y-quhm
summary 
Moodle stored XSS via calendar's event title when deleting the event
Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38274
reference_id
reference_type
scores
0
value 0.00994
scoring_system epss
scoring_elements 0.77309
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38274
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
3
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
4
reference_url https://moodle.org/mod/forum/discuss.php?d=459499
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/
url https://moodle.org/mod/forum/discuss.php?d=459499
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38274
reference_id CVE-2024-38274
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38274
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
7
reference_url https://github.com/advisories/GHSA-p5cg-6rfr-6mx8
reference_id GHSA-p5cg-6rfr-6mx8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p5cg-6rfr-6mx8
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.11
purl pkg:composer/moodle/moodle@4.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-d92c-j4yy-fud3
24
vulnerability VCID-dky9-v96e-pubh
25
vulnerability VCID-f1da-1duc-2uhb
26
vulnerability VCID-ffp4-23na-rkgr
27
vulnerability VCID-g3km-hbas-x3cg
28
vulnerability VCID-gwnb-e3gt-kqcb
29
vulnerability VCID-gzdw-424p-mqfa
30
vulnerability VCID-hufb-p6pa-63c9
31
vulnerability VCID-j3ts-5ghc-4qct
32
vulnerability VCID-m2a7-q28u-1yfw
33
vulnerability VCID-m3jj-r66a-d7cv
34
vulnerability VCID-m9tk-fa8m-zbah
35
vulnerability VCID-mnx8-118d-efcr
36
vulnerability VCID-pd2f-4kxt-bkgp
37
vulnerability VCID-qruy-fs4p-43h1
38
vulnerability VCID-r4m3-9prr-dkby
39
vulnerability VCID-r5w9-cbyk-hqc6
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-ueyy-v42v-7ydh
44
vulnerability VCID-vsrk-zp7j-w7bk
45
vulnerability VCID-vve8-f9s9-v7ft
46
vulnerability VCID-wby4-h9ud-1yh5
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-yby1-g45r-rugg
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-zjqu-hbpf-9qe1
54
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11
1
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
2
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
3
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38274, GHSA-p5cg-6rfr-6mx8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pged-191y-quhm
61
url VCID-qabh-bpmn-1ye5
vulnerability_id VCID-qabh-bpmn-1ye5
summary 
Cross-Site Request Forgery in moodle
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-54749
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-54749
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25982
reference_id
reference_type
scores
0
value 0.0038
scoring_system epss
scoring_elements 0.59795
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25982
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264098
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264098
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/bac703c534d05d4502580fbe32447d5c777869bf
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bac703c534d05d4502580fbe32447d5c777869bf
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455638
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url https://moodle.org/mod/forum/discuss.php?d=455638
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25982
reference_id CVE-2024-25982
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25982
8
reference_url https://github.com/advisories/GHSA-7pjp-fm93-p6pj
reference_id GHSA-7pjp-fm93-p6pj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7pjp-fm93-p6pj
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.9
purl pkg:composer/moodle/moodle@4.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6cvg-r9am-wbh5
19
vulnerability VCID-6p1s-2r14-z7ax
20
vulnerability VCID-7p54-yn8k-aydw
21
vulnerability VCID-7trf-g8dq-tua1
22
vulnerability VCID-893t-9cja-43g2
23
vulnerability VCID-8uah-srba-6ubb
24
vulnerability VCID-9rqr-xzr8-5fgf
25
vulnerability VCID-9xk9-qb9x-jfcs
26
vulnerability VCID-a1ek-x154-5ydy
27
vulnerability VCID-ajrr-8392-kkcw
28
vulnerability VCID-b3vw-8hzh-dybx
29
vulnerability VCID-d92c-j4yy-fud3
30
vulnerability VCID-dky9-v96e-pubh
31
vulnerability VCID-dp61-6ban-cyda
32
vulnerability VCID-evef-t6cx-vqcc
33
vulnerability VCID-f1da-1duc-2uhb
34
vulnerability VCID-ffp4-23na-rkgr
35
vulnerability VCID-g3km-hbas-x3cg
36
vulnerability VCID-gwnb-e3gt-kqcb
37
vulnerability VCID-gzdw-424p-mqfa
38
vulnerability VCID-hmuw-bjax-37bz
39
vulnerability VCID-hufb-p6pa-63c9
40
vulnerability VCID-j3ts-5ghc-4qct
41
vulnerability VCID-jkyc-esnt-p3ay
42
vulnerability VCID-m2a7-q28u-1yfw
43
vulnerability VCID-m3jj-r66a-d7cv
44
vulnerability VCID-m9tk-fa8m-zbah
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-pd2f-4kxt-bkgp
48
vulnerability VCID-pged-191y-quhm
49
vulnerability VCID-qruy-fs4p-43h1
50
vulnerability VCID-r4m3-9prr-dkby
51
vulnerability VCID-r5w9-cbyk-hqc6
52
vulnerability VCID-rm2q-xde7-a3ej
53
vulnerability VCID-sdxf-f1b3-t3cc
54
vulnerability VCID-sgdq-5ha7-nfh2
55
vulnerability VCID-t8vm-tfnq-5kak
56
vulnerability VCID-team-9wba-yufc
57
vulnerability VCID-tgs8-3n7x-cyc1
58
vulnerability VCID-ueyy-v42v-7ydh
59
vulnerability VCID-umd1-pmr4-4bgs
60
vulnerability VCID-vsrk-zp7j-w7bk
61
vulnerability VCID-vve8-f9s9-v7ft
62
vulnerability VCID-wby4-h9ud-1yh5
63
vulnerability VCID-wwny-t2ez-y3e1
64
vulnerability VCID-wwx4-ns21-k3hd
65
vulnerability VCID-wytb-bryq-yqb4
66
vulnerability VCID-y4g2-328f-qbge
67
vulnerability VCID-yby1-g45r-rugg
68
vulnerability VCID-ykj6-ptd4-7qfs
69
vulnerability VCID-ytd5-2swj-wkh1
70
vulnerability VCID-z5u9-5522-h7fx
71
vulnerability VCID-zjqu-hbpf-9qe1
72
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.9
1
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
2
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25982, GHSA-7pjp-fm93-p6pj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qabh-bpmn-1ye5
62
url VCID-qruy-fs4p-43h1
vulnerability_id VCID-qruy-fs4p-43h1
summary 
Moodle has CSRF risk in Feedback non-respondents report
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43434
reference_id
reference_type
scores
0
value 0.00522
scoring_system epss
scoring_elements 0.6729
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43434
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304262
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304262
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461203
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:44Z/
url https://moodle.org/mod/forum/discuss.php?d=461203
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43434
reference_id CVE-2024-43434
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43434
5
reference_url https://github.com/advisories/GHSA-x87r-37q5-mmr8
reference_id GHSA-x87r-37q5-mmr8
reference_type
scores
url https://github.com/advisories/GHSA-x87r-37q5-mmr8
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43434, GHSA-x87r-37q5-mmr8
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qruy-fs4p-43h1
63
url VCID-qw4y-q2gg-akea
vulnerability_id VCID-qw4y-q2gg-akea
summary 
Moodle has Incorrect Default Permissions
In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36400
reference_id
reference_type
scores
0
value 0.0028
scoring_system epss
scoring_elements 0.51636
published_at 2026-06-04T12:55:00Z
1
value 0.0028
scoring_system epss
scoring_elements 0.51696
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36400
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424806
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:03:17Z/
url https://moodle.org/mod/forum/discuss.php?d=424806
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36400
reference_id CVE-2021-36400
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36400
4
reference_url https://github.com/advisories/GHSA-35wf-3wq2-r3hx
reference_id GHSA-35wf-3wq2-r3hx
reference_type
scores
url https://github.com/advisories/GHSA-35wf-3wq2-r3hx
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36400, GHSA-35wf-3wq2-r3hx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qw4y-q2gg-akea
64
url VCID-r1ug-e8x6-83gt
vulnerability_id VCID-r1ug-e8x6-83gt
summary 
Uncontrolled Resource Consumption
Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-74641
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-74641
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25978
reference_id
reference_type
scores
0
value 0.00292
scoring_system epss
scoring_elements 0.52921
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25978
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264074
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264074
3
reference_url https://github.com/moodle/moodle/commit/9ba14233597480fb78c04d531050c090de4e60a2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/9ba14233597480fb78c04d531050c090de4e60a2
4
reference_url https://github.com/moodle/moodle/commit/a73e0ac76d77b67602f91bb211962813d60bc573
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a73e0ac76d77b67602f91bb211962813d60bc573
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455634
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url https://moodle.org/mod/forum/discuss.php?d=455634
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25978
reference_id CVE-2024-25978
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25978
8
reference_url https://github.com/advisories/GHSA-487g-3m3v-hjhq
reference_id GHSA-487g-3m3v-hjhq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-487g-3m3v-hjhq
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.9
purl pkg:composer/moodle/moodle@4.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6cvg-r9am-wbh5
19
vulnerability VCID-6p1s-2r14-z7ax
20
vulnerability VCID-7p54-yn8k-aydw
21
vulnerability VCID-7trf-g8dq-tua1
22
vulnerability VCID-893t-9cja-43g2
23
vulnerability VCID-8uah-srba-6ubb
24
vulnerability VCID-9rqr-xzr8-5fgf
25
vulnerability VCID-9xk9-qb9x-jfcs
26
vulnerability VCID-a1ek-x154-5ydy
27
vulnerability VCID-ajrr-8392-kkcw
28
vulnerability VCID-b3vw-8hzh-dybx
29
vulnerability VCID-d92c-j4yy-fud3
30
vulnerability VCID-dky9-v96e-pubh
31
vulnerability VCID-dp61-6ban-cyda
32
vulnerability VCID-evef-t6cx-vqcc
33
vulnerability VCID-f1da-1duc-2uhb
34
vulnerability VCID-ffp4-23na-rkgr
35
vulnerability VCID-g3km-hbas-x3cg
36
vulnerability VCID-gwnb-e3gt-kqcb
37
vulnerability VCID-gzdw-424p-mqfa
38
vulnerability VCID-hmuw-bjax-37bz
39
vulnerability VCID-hufb-p6pa-63c9
40
vulnerability VCID-j3ts-5ghc-4qct
41
vulnerability VCID-jkyc-esnt-p3ay
42
vulnerability VCID-m2a7-q28u-1yfw
43
vulnerability VCID-m3jj-r66a-d7cv
44
vulnerability VCID-m9tk-fa8m-zbah
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-pd2f-4kxt-bkgp
48
vulnerability VCID-pged-191y-quhm
49
vulnerability VCID-qruy-fs4p-43h1
50
vulnerability VCID-r4m3-9prr-dkby
51
vulnerability VCID-r5w9-cbyk-hqc6
52
vulnerability VCID-rm2q-xde7-a3ej
53
vulnerability VCID-sdxf-f1b3-t3cc
54
vulnerability VCID-sgdq-5ha7-nfh2
55
vulnerability VCID-t8vm-tfnq-5kak
56
vulnerability VCID-team-9wba-yufc
57
vulnerability VCID-tgs8-3n7x-cyc1
58
vulnerability VCID-ueyy-v42v-7ydh
59
vulnerability VCID-umd1-pmr4-4bgs
60
vulnerability VCID-vsrk-zp7j-w7bk
61
vulnerability VCID-vve8-f9s9-v7ft
62
vulnerability VCID-wby4-h9ud-1yh5
63
vulnerability VCID-wwny-t2ez-y3e1
64
vulnerability VCID-wwx4-ns21-k3hd
65
vulnerability VCID-wytb-bryq-yqb4
66
vulnerability VCID-y4g2-328f-qbge
67
vulnerability VCID-yby1-g45r-rugg
68
vulnerability VCID-ykj6-ptd4-7qfs
69
vulnerability VCID-ytd5-2swj-wkh1
70
vulnerability VCID-z5u9-5522-h7fx
71
vulnerability VCID-zjqu-hbpf-9qe1
72
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.9
1
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
2
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25978, GHSA-487g-3m3v-hjhq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r1ug-e8x6-83gt
65
url VCID-r4m3-9prr-dkby
vulnerability_id VCID-r4m3-9prr-dkby
summary 
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43438
reference_id
reference_type
scores
0
value 0.00287
scoring_system epss
scoring_elements 0.5246
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43438
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304267
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:31Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304267
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461208
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:31Z/
url https://moodle.org/mod/forum/discuss.php?d=461208
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43438
reference_id CVE-2024-43438
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43438
5
reference_url https://github.com/advisories/GHSA-p9cx-f595-h79h
reference_id GHSA-p9cx-f595-h79h
reference_type
scores
url https://github.com/advisories/GHSA-p9cx-f595-h79h
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43438, GHSA-p9cx-f595-h79h
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r4m3-9prr-dkby
66
url VCID-r5w9-cbyk-hqc6
vulnerability_id VCID-r5w9-cbyk-hqc6
summary 
Moodle's IDOR in badges allows deletion of arbitrary badges
A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43431
reference_id
reference_type
scores
0
value 0.00308
scoring_system epss
scoring_elements 0.54353
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43431
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304259
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:53Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304259
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461199
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:53Z/
url https://moodle.org/mod/forum/discuss.php?d=461199
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43431
reference_id CVE-2024-43431
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43431
5
reference_url https://github.com/advisories/GHSA-wwjf-gwrv-wh45
reference_id GHSA-wwjf-gwrv-wh45
reference_type
scores
url https://github.com/advisories/GHSA-wwjf-gwrv-wh45
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43431, GHSA-wwjf-gwrv-wh45
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r5w9-cbyk-hqc6
67
url VCID-rm2q-xde7-a3ej
vulnerability_id VCID-rm2q-xde7-a3ej
summary 
Moodle uses the same key for QR login and auto-login
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38277
reference_id
reference_type
scores
0
value 0.00186
scoring_system epss
scoring_elements 0.40237
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38277
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56
3
reference_url https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57
4
reference_url https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06
5
reference_url https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
8
reference_url https://moodle.org/mod/forum/discuss.php?d=459502
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/
url https://moodle.org/mod/forum/discuss.php?d=459502
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38277
reference_id CVE-2024-38277
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38277
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
11
reference_url https://github.com/advisories/GHSA-r82w-3phg-qvr4
reference_id GHSA-r82w-3phg-qvr4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r82w-3phg-qvr4
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.11
purl pkg:composer/moodle/moodle@4.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-d92c-j4yy-fud3
24
vulnerability VCID-dky9-v96e-pubh
25
vulnerability VCID-f1da-1duc-2uhb
26
vulnerability VCID-ffp4-23na-rkgr
27
vulnerability VCID-g3km-hbas-x3cg
28
vulnerability VCID-gwnb-e3gt-kqcb
29
vulnerability VCID-gzdw-424p-mqfa
30
vulnerability VCID-hufb-p6pa-63c9
31
vulnerability VCID-j3ts-5ghc-4qct
32
vulnerability VCID-m2a7-q28u-1yfw
33
vulnerability VCID-m3jj-r66a-d7cv
34
vulnerability VCID-m9tk-fa8m-zbah
35
vulnerability VCID-mnx8-118d-efcr
36
vulnerability VCID-pd2f-4kxt-bkgp
37
vulnerability VCID-qruy-fs4p-43h1
38
vulnerability VCID-r4m3-9prr-dkby
39
vulnerability VCID-r5w9-cbyk-hqc6
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-ueyy-v42v-7ydh
44
vulnerability VCID-vsrk-zp7j-w7bk
45
vulnerability VCID-vve8-f9s9-v7ft
46
vulnerability VCID-wby4-h9ud-1yh5
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-yby1-g45r-rugg
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-zjqu-hbpf-9qe1
54
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11
1
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
2
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
3
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38277, GHSA-r82w-3phg-qvr4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rm2q-xde7-a3ej
68
url VCID-ry6t-xcsq-4bf2
vulnerability_id VCID-ry6t-xcsq-4bf2
summary 
Moodle SQL Injection vulnerability
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36392
reference_id
reference_type
scores
0
value 0.01347
scoring_system epss
scoring_elements 0.80407
published_at 2026-06-04T12:55:00Z
1
value 0.01347
scoring_system epss
scoring_elements 0.80432
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36392
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424797
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-03-06T15:46:10Z/
url https://moodle.org/mod/forum/discuss.php?d=424797
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36392
reference_id CVE-2021-36392
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36392
4
reference_url https://github.com/advisories/GHSA-qc86-vgf2-6fq6
reference_id GHSA-qc86-vgf2-6fq6
reference_type
scores
url https://github.com/advisories/GHSA-qc86-vgf2-6fq6
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36392, GHSA-qc86-vgf2-6fq6
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ry6t-xcsq-4bf2
69
url VCID-rzbf-yc44-6bdb
vulnerability_id VCID-rzbf-yc44-6bdb
summary 
Moodle vulnerable to Stored Cross-site Scripting
In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36401
reference_id
reference_type
scores
0
value 0.00265
scoring_system epss
scoring_elements 0.50195
published_at 2026-06-05T12:55:00Z
1
value 0.00265
scoring_system epss
scoring_elements 0.50134
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36401
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424807
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:02:05Z/
url https://moodle.org/mod/forum/discuss.php?d=424807
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36401
reference_id CVE-2021-36401
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36401
4
reference_url https://github.com/advisories/GHSA-g6h6-4fp6-w33w
reference_id GHSA-g6h6-4fp6-w33w
reference_type
scores
url https://github.com/advisories/GHSA-g6h6-4fp6-w33w
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36401, GHSA-g6h6-4fp6-w33w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rzbf-yc44-6bdb
70
url VCID-sdxf-f1b3-t3cc
vulnerability_id VCID-sdxf-f1b3-t3cc
summary 
Moodle vulnerable to site administration SQL injection via XMLDB editor
A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43436
reference_id
reference_type
scores
0
value 0.00496
scoring_system epss
scoring_elements 0.6619
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43436
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304264
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:37Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304264
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461206
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:37Z/
url https://moodle.org/mod/forum/discuss.php?d=461206
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43436
reference_id CVE-2024-43436
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43436
5
reference_url https://github.com/advisories/GHSA-mx26-62xm-2p83
reference_id GHSA-mx26-62xm-2p83
reference_type
scores
url https://github.com/advisories/GHSA-mx26-62xm-2p83
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43436, GHSA-mx26-62xm-2p83
risk_score 3.2
exploitability 0.5
weighted_severity 6.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sdxf-f1b3-t3cc
71
url VCID-sgdq-5ha7-nfh2
vulnerability_id VCID-sgdq-5ha7-nfh2
summary 
Moodle has a stored XSS in ddimageortext question type
The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896
reference_id
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-24T20:03:52Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82896
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26528
reference_id
reference_type
scores
0
value 0.00706
scoring_system epss
scoring_elements 0.72569
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26528
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466144
reference_id
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-24T20:03:52Z/
url https://moodle.org/mod/forum/discuss.php?d=466144
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26528
reference_id CVE-2025-26528
reference_type
scores
0
value 3.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26528
5
reference_url https://github.com/advisories/GHSA-h697-w4ph-7pcx
reference_id GHSA-h697-w4ph-7pcx
reference_type
scores
url https://github.com/advisories/GHSA-h697-w4ph-7pcx
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26528, GHSA-h697-w4ph-7pcx
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sgdq-5ha7-nfh2
72
url VCID-t8vm-tfnq-5kak
vulnerability_id VCID-t8vm-tfnq-5kak
summary 
moodle: IDOR when fetching report schedules
A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48901
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48901
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318817
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:55:25Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318817
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48901
reference_id CVE-2024-48901
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48901
4
reference_url https://github.com/advisories/GHSA-mg54-p2wj-5ph7
reference_id GHSA-mg54-p2wj-5ph7
reference_type
scores
url https://github.com/advisories/GHSA-mg54-p2wj-5ph7
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.14
purl pkg:composer/moodle/moodle@4.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-gwnb-e3gt-kqcb
19
vulnerability VCID-gzdw-424p-mqfa
20
vulnerability VCID-hufb-p6pa-63c9
21
vulnerability VCID-j3ts-5ghc-4qct
22
vulnerability VCID-m2a7-q28u-1yfw
23
vulnerability VCID-pd2f-4kxt-bkgp
24
vulnerability VCID-sgdq-5ha7-nfh2
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vve8-f9s9-v7ft
27
vulnerability VCID-wby4-h9ud-1yh5
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-yby1-g45r-rugg
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-zjqu-hbpf-9qe1
33
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14
1
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
2
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
3
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48901, GHSA-mg54-p2wj-5ph7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t8vm-tfnq-5kak
73
url VCID-tb5z-bfmc-zkgh
vulnerability_id VCID-tb5z-bfmc-zkgh
summary 
Moodle SQL Injection vulnerability
In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-36393
reference_id
reference_type
scores
0
value 0.23988
scoring_system epss
scoring_elements 0.96136
published_at 2026-06-04T12:55:00Z
1
value 0.23988
scoring_system epss
scoring_elements 0.96141
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-36393
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=424798
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-03-06T15:45:19Z/
url https://moodle.org/mod/forum/discuss.php?d=424798
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-36393
reference_id CVE-2021-36393
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-36393
4
reference_url https://github.com/advisories/GHSA-f46j-r7q3-6cm2
reference_id GHSA-f46j-r7q3-6cm2
reference_type
scores
url https://github.com/advisories/GHSA-f46j-r7q3-6cm2
fixed_packages
0
url pkg:composer/moodle/moodle@3.10.5
purl pkg:composer/moodle/moodle@3.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-21mq-pewz-ekdt
6
vulnerability VCID-233t-s5y8-4yg5
7
vulnerability VCID-29mv-feyq-guew
8
vulnerability VCID-2gtq-u4jg-4uck
9
vulnerability VCID-2urf-d2qr-abdy
10
vulnerability VCID-2wsu-7rzh-h7cs
11
vulnerability VCID-3nu2-1cwj-sfdd
12
vulnerability VCID-3nvq-s7y5-fufr
13
vulnerability VCID-3yre-ft3n-2fd3
14
vulnerability VCID-44zf-1dw7-qkf5
15
vulnerability VCID-4zvp-nmrk-4qbq
16
vulnerability VCID-57wg-wxss-jbaw
17
vulnerability VCID-5ba5-pee7-6kh1
18
vulnerability VCID-5s33-v19s-sqd6
19
vulnerability VCID-5snb-dyv3-efe9
20
vulnerability VCID-5xhb-mx3v-fuhs
21
vulnerability VCID-61ry-zz34-8qhj
22
vulnerability VCID-657g-68tv-dkam
23
vulnerability VCID-6726-ca8y-4uez
24
vulnerability VCID-6cvg-r9am-wbh5
25
vulnerability VCID-6p1s-2r14-z7ax
26
vulnerability VCID-6rc8-bs9z-5bb2
27
vulnerability VCID-7p54-yn8k-aydw
28
vulnerability VCID-7trf-g8dq-tua1
29
vulnerability VCID-893t-9cja-43g2
30
vulnerability VCID-8uah-srba-6ubb
31
vulnerability VCID-95f1-6g3r-rkg4
32
vulnerability VCID-9rqr-xzr8-5fgf
33
vulnerability VCID-9xk9-qb9x-jfcs
34
vulnerability VCID-a1ek-x154-5ydy
35
vulnerability VCID-ajrr-8392-kkcw
36
vulnerability VCID-b3vw-8hzh-dybx
37
vulnerability VCID-bhfv-dn14-ukfs
38
vulnerability VCID-cp4k-uz4a-ukh6
39
vulnerability VCID-d92c-j4yy-fud3
40
vulnerability VCID-dky9-v96e-pubh
41
vulnerability VCID-dp61-6ban-cyda
42
vulnerability VCID-evef-t6cx-vqcc
43
vulnerability VCID-f1da-1duc-2uhb
44
vulnerability VCID-ffp4-23na-rkgr
45
vulnerability VCID-g3km-hbas-x3cg
46
vulnerability VCID-g9f7-787g-vyem
47
vulnerability VCID-gwnb-e3gt-kqcb
48
vulnerability VCID-gycn-bey2-4yam
49
vulnerability VCID-gzdw-424p-mqfa
50
vulnerability VCID-hk13-uc46-87h1
51
vulnerability VCID-hmuw-bjax-37bz
52
vulnerability VCID-hufb-p6pa-63c9
53
vulnerability VCID-j21p-heue-nqd9
54
vulnerability VCID-j3ts-5ghc-4qct
55
vulnerability VCID-jkyc-esnt-p3ay
56
vulnerability VCID-m2a7-q28u-1yfw
57
vulnerability VCID-m3jj-r66a-d7cv
58
vulnerability VCID-m9tk-fa8m-zbah
59
vulnerability VCID-mhh7-n7ut-hkh6
60
vulnerability VCID-mnx8-118d-efcr
61
vulnerability VCID-ms4e-v5zc-9kgc
62
vulnerability VCID-p3ge-1cqt-tufw
63
vulnerability VCID-pd2f-4kxt-bkgp
64
vulnerability VCID-pged-191y-quhm
65
vulnerability VCID-qabh-bpmn-1ye5
66
vulnerability VCID-qfvz-hf8h-8bb3
67
vulnerability VCID-qruy-fs4p-43h1
68
vulnerability VCID-r1ug-e8x6-83gt
69
vulnerability VCID-r4m3-9prr-dkby
70
vulnerability VCID-r5w9-cbyk-hqc6
71
vulnerability VCID-rm2q-xde7-a3ej
72
vulnerability VCID-sca8-zx4m-sub6
73
vulnerability VCID-sdxf-f1b3-t3cc
74
vulnerability VCID-sgdq-5ha7-nfh2
75
vulnerability VCID-t8vm-tfnq-5kak
76
vulnerability VCID-taab-hupu-huf9
77
vulnerability VCID-team-9wba-yufc
78
vulnerability VCID-tgs8-3n7x-cyc1
79
vulnerability VCID-u32t-89zc-v3gj
80
vulnerability VCID-ueyy-v42v-7ydh
81
vulnerability VCID-uhc9-p93a-gbau
82
vulnerability VCID-umd1-pmr4-4bgs
83
vulnerability VCID-vsrk-zp7j-w7bk
84
vulnerability VCID-vve8-f9s9-v7ft
85
vulnerability VCID-wby4-h9ud-1yh5
86
vulnerability VCID-wwny-t2ez-y3e1
87
vulnerability VCID-wwx4-ns21-k3hd
88
vulnerability VCID-wytb-bryq-yqb4
89
vulnerability VCID-xh4x-t7he-pufq
90
vulnerability VCID-y4g2-328f-qbge
91
vulnerability VCID-yby1-g45r-rugg
92
vulnerability VCID-yc6t-am1p-x3ev
93
vulnerability VCID-yenj-fv96-pbd7
94
vulnerability VCID-ykj6-ptd4-7qfs
95
vulnerability VCID-ytd5-2swj-wkh1
96
vulnerability VCID-z29a-xpcq-p7ct
97
vulnerability VCID-z5u9-5522-h7fx
98
vulnerability VCID-zf4q-a4cz-y7dh
99
vulnerability VCID-zjqu-hbpf-9qe1
100
vulnerability VCID-zrjj-atms-8uf9
101
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.5
1
url pkg:composer/moodle/moodle@3.11.1
purl pkg:composer/moodle/moodle@3.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-164m-humk-1fe3
1
vulnerability VCID-17k8-g4xw-b7g9
2
vulnerability VCID-1efm-18zh-w7gm
3
vulnerability VCID-1kfj-2zwf-vbfp
4
vulnerability VCID-1wup-hjxg-f7g4
5
vulnerability VCID-1wzm-dhqv-43bj
6
vulnerability VCID-21mq-pewz-ekdt
7
vulnerability VCID-233t-s5y8-4yg5
8
vulnerability VCID-24bp-c9yc-gua4
9
vulnerability VCID-29mv-feyq-guew
10
vulnerability VCID-2gtq-u4jg-4uck
11
vulnerability VCID-2trf-n9r4-ykgg
12
vulnerability VCID-2urf-d2qr-abdy
13
vulnerability VCID-2wsu-7rzh-h7cs
14
vulnerability VCID-2z6d-qf96-kyb4
15
vulnerability VCID-33ss-gb34-8ke5
16
vulnerability VCID-3ept-fdps-5fe5
17
vulnerability VCID-3nu2-1cwj-sfdd
18
vulnerability VCID-3nvq-s7y5-fufr
19
vulnerability VCID-3yre-ft3n-2fd3
20
vulnerability VCID-44zf-1dw7-qkf5
21
vulnerability VCID-49gk-ugfy-6bcd
22
vulnerability VCID-4c9d-jf9g-u3gn
23
vulnerability VCID-4m9g-bu1c-hbec
24
vulnerability VCID-4zvp-nmrk-4qbq
25
vulnerability VCID-57wg-wxss-jbaw
26
vulnerability VCID-5ba5-pee7-6kh1
27
vulnerability VCID-5bfe-hk7m-7bh6
28
vulnerability VCID-5q1e-b4e8-jbc8
29
vulnerability VCID-5rk8-v6bb-6ugh
30
vulnerability VCID-5s33-v19s-sqd6
31
vulnerability VCID-5snb-dyv3-efe9
32
vulnerability VCID-5xhb-mx3v-fuhs
33
vulnerability VCID-61ry-zz34-8qhj
34
vulnerability VCID-62fw-qwr5-eyc1
35
vulnerability VCID-657g-68tv-dkam
36
vulnerability VCID-6726-ca8y-4uez
37
vulnerability VCID-6cvg-r9am-wbh5
38
vulnerability VCID-6p1s-2r14-z7ax
39
vulnerability VCID-6rc8-bs9z-5bb2
40
vulnerability VCID-7p54-yn8k-aydw
41
vulnerability VCID-7rqc-eepq-43ds
42
vulnerability VCID-7trf-g8dq-tua1
43
vulnerability VCID-7x6e-qege-ufdv
44
vulnerability VCID-86jh-xn5g-kkgc
45
vulnerability VCID-893t-9cja-43g2
46
vulnerability VCID-8d9n-ejbb-7fa1
47
vulnerability VCID-8uah-srba-6ubb
48
vulnerability VCID-9rqr-xzr8-5fgf
49
vulnerability VCID-9uem-p6k3-nqdb
50
vulnerability VCID-9xk9-qb9x-jfcs
51
vulnerability VCID-a1ek-x154-5ydy
52
vulnerability VCID-ajrr-8392-kkcw
53
vulnerability VCID-b3vw-8hzh-dybx
54
vulnerability VCID-b994-r5mw-3fbg
55
vulnerability VCID-bhfv-dn14-ukfs
56
vulnerability VCID-cbzx-gnhr-pfap
57
vulnerability VCID-cp4k-uz4a-ukh6
58
vulnerability VCID-d8gp-tuxy-3qdf
59
vulnerability VCID-d92c-j4yy-fud3
60
vulnerability VCID-dky9-v96e-pubh
61
vulnerability VCID-dp61-6ban-cyda
62
vulnerability VCID-dvrf-62nt-2kdp
63
vulnerability VCID-evef-t6cx-vqcc
64
vulnerability VCID-f1da-1duc-2uhb
65
vulnerability VCID-f3b8-bfqu-8qbk
66
vulnerability VCID-ffp4-23na-rkgr
67
vulnerability VCID-g3km-hbas-x3cg
68
vulnerability VCID-g9f7-787g-vyem
69
vulnerability VCID-gabv-ggbj-ckaj
70
vulnerability VCID-gepg-y7ud-cuds
71
vulnerability VCID-gt5j-wemg-17gx
72
vulnerability VCID-gwnb-e3gt-kqcb
73
vulnerability VCID-gycn-bey2-4yam
74
vulnerability VCID-gzdw-424p-mqfa
75
vulnerability VCID-hk13-uc46-87h1
76
vulnerability VCID-hmuw-bjax-37bz
77
vulnerability VCID-hsk6-h5ky-g3cx
78
vulnerability VCID-hufb-p6pa-63c9
79
vulnerability VCID-j21p-heue-nqd9
80
vulnerability VCID-j3ts-5ghc-4qct
81
vulnerability VCID-jarn-rtuz-wucq
82
vulnerability VCID-jfsu-ya7r-h3e1
83
vulnerability VCID-jkyc-esnt-p3ay
84
vulnerability VCID-jsza-gn5n-cfac
85
vulnerability VCID-kjd6-4drf-9ycm
86
vulnerability VCID-m2a7-q28u-1yfw
87
vulnerability VCID-m3jj-r66a-d7cv
88
vulnerability VCID-m9tk-fa8m-zbah
89
vulnerability VCID-mhh7-n7ut-hkh6
90
vulnerability VCID-mnx8-118d-efcr
91
vulnerability VCID-ms4e-v5zc-9kgc
92
vulnerability VCID-p3ge-1cqt-tufw
93
vulnerability VCID-pd2f-4kxt-bkgp
94
vulnerability VCID-pged-191y-quhm
95
vulnerability VCID-q7va-hwg7-fbb4
96
vulnerability VCID-qabh-bpmn-1ye5
97
vulnerability VCID-qfvz-hf8h-8bb3
98
vulnerability VCID-qruy-fs4p-43h1
99
vulnerability VCID-r1ug-e8x6-83gt
100
vulnerability VCID-r4m3-9prr-dkby
101
vulnerability VCID-r5w9-cbyk-hqc6
102
vulnerability VCID-rm2q-xde7-a3ej
103
vulnerability VCID-rqde-qn4c-pfd9
104
vulnerability VCID-s7pu-hgz5-zfbq
105
vulnerability VCID-sca8-zx4m-sub6
106
vulnerability VCID-sdxf-f1b3-t3cc
107
vulnerability VCID-sgdq-5ha7-nfh2
108
vulnerability VCID-t1vq-5b3t-tbfd
109
vulnerability VCID-t8vm-tfnq-5kak
110
vulnerability VCID-taab-hupu-huf9
111
vulnerability VCID-team-9wba-yufc
112
vulnerability VCID-tgs8-3n7x-cyc1
113
vulnerability VCID-u32t-89zc-v3gj
114
vulnerability VCID-ucyr-e6qr-5qe1
115
vulnerability VCID-ueyy-v42v-7ydh
116
vulnerability VCID-uhc9-p93a-gbau
117
vulnerability VCID-umd1-pmr4-4bgs
118
vulnerability VCID-utsj-g57g-cbeb
119
vulnerability VCID-vj1z-16nw-5khk
120
vulnerability VCID-vsrk-zp7j-w7bk
121
vulnerability VCID-vve8-f9s9-v7ft
122
vulnerability VCID-wby4-h9ud-1yh5
123
vulnerability VCID-wwny-t2ez-y3e1
124
vulnerability VCID-wwx4-ns21-k3hd
125
vulnerability VCID-wytb-bryq-yqb4
126
vulnerability VCID-x1pc-1kuc-kug2
127
vulnerability VCID-xh4x-t7he-pufq
128
vulnerability VCID-y4g2-328f-qbge
129
vulnerability VCID-yby1-g45r-rugg
130
vulnerability VCID-yc6t-am1p-x3ev
131
vulnerability VCID-yenj-fv96-pbd7
132
vulnerability VCID-ykj6-ptd4-7qfs
133
vulnerability VCID-ytd5-2swj-wkh1
134
vulnerability VCID-yxag-fghx-47ej
135
vulnerability VCID-z29a-xpcq-p7ct
136
vulnerability VCID-z5u9-5522-h7fx
137
vulnerability VCID-zf4q-a4cz-y7dh
138
vulnerability VCID-zjqu-hbpf-9qe1
139
vulnerability VCID-zrjj-atms-8uf9
140
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.11.1
aliases CVE-2021-36393, GHSA-f46j-r7q3-6cm2
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tb5z-bfmc-zkgh
74
url VCID-team-9wba-yufc
vulnerability_id VCID-team-9wba-yufc
summary 
Improper Access Control
Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-1439
reference_id
reference_type
scores
0
value 0.00068
scoring_system epss
scoring_elements 0.21277
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-1439
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-control-vulnerability-moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-12T16:28:28Z/
url https://www.incibe.es/en/incibe-cert/notices/aviso/inadequate-access-control-vulnerability-moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-1439
reference_id CVE-2024-1439
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-1439
4
reference_url https://github.com/advisories/GHSA-5p2x-8427-9fgp
reference_id GHSA-5p2x-8427-9fgp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5p2x-8427-9fgp
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.1
purl pkg:composer/moodle/moodle@4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-24bp-c9yc-gua4
3
vulnerability VCID-2urf-d2qr-abdy
4
vulnerability VCID-2wsu-7rzh-h7cs
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-4c9d-jf9g-u3gn
8
vulnerability VCID-4svp-grnb-2fh3
9
vulnerability VCID-5ba5-pee7-6kh1
10
vulnerability VCID-5s33-v19s-sqd6
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6726-ca8y-4uez
13
vulnerability VCID-6p1s-2r14-z7ax
14
vulnerability VCID-7p54-yn8k-aydw
15
vulnerability VCID-7rqc-eepq-43ds
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-7x6e-qege-ufdv
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8d9n-ejbb-7fa1
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-ajrr-8392-kkcw
23
vulnerability VCID-b3vw-8hzh-dybx
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dp61-6ban-cyda
26
vulnerability VCID-evef-t6cx-vqcc
27
vulnerability VCID-g3km-hbas-x3cg
28
vulnerability VCID-gycn-bey2-4yam
29
vulnerability VCID-hmuw-bjax-37bz
30
vulnerability VCID-hsk6-h5ky-g3cx
31
vulnerability VCID-j3ts-5ghc-4qct
32
vulnerability VCID-jfsu-ya7r-h3e1
33
vulnerability VCID-jkyc-esnt-p3ay
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mhh7-n7ut-hkh6
38
vulnerability VCID-mnx8-118d-efcr
39
vulnerability VCID-ms4e-v5zc-9kgc
40
vulnerability VCID-ngar-aydn-eye4
41
vulnerability VCID-pged-191y-quhm
42
vulnerability VCID-qabh-bpmn-1ye5
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r1ug-e8x6-83gt
45
vulnerability VCID-r4m3-9prr-dkby
46
vulnerability VCID-r5w9-cbyk-hqc6
47
vulnerability VCID-rm2q-xde7-a3ej
48
vulnerability VCID-s7pu-hgz5-zfbq
49
vulnerability VCID-sdxf-f1b3-t3cc
50
vulnerability VCID-t8vm-tfnq-5kak
51
vulnerability VCID-tgs8-3n7x-cyc1
52
vulnerability VCID-umd1-pmr4-4bgs
53
vulnerability VCID-utsj-g57g-cbeb
54
vulnerability VCID-vsrk-zp7j-w7bk
55
vulnerability VCID-wwny-t2ez-y3e1
56
vulnerability VCID-x1pc-1kuc-kug2
57
vulnerability VCID-y4g2-328f-qbge
58
vulnerability VCID-yc6t-am1p-x3ev
59
vulnerability VCID-ykj6-ptd4-7qfs
60
vulnerability VCID-ytd5-2swj-wkh1
61
vulnerability VCID-z5u9-5522-h7fx
62
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.1
aliases CVE-2024-1439, GHSA-5p2x-8427-9fgp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-team-9wba-yufc
75
url VCID-tgs8-3n7x-cyc1
vulnerability_id VCID-tgs8-3n7x-cyc1
summary 
Moodle HTTP authorization header is preserved between "emulated redirects"
The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38275
reference_id
reference_type
scores
0
value 0.00546
scoring_system epss
scoring_elements 0.68222
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38275
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0df3c5837a592e6663c4d531ff6a1f776bc2f785
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0df3c5837a592e6663c4d531ff6a1f776bc2f785
3
reference_url https://github.com/moodle/moodle/commit/3e38c84315a7991ce5ef5f241f5e873b5ca24f01
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/3e38c84315a7991ce5ef5f241f5e873b5ca24f01
4
reference_url https://github.com/moodle/moodle/commit/836b2c23a210317d130017d77bb64e3b510869a9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/836b2c23a210317d130017d77bb64e3b510869a9
5
reference_url https://github.com/moodle/moodle/commit/f7988538b2208c55f2c40ce4f0815901dc88049b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/f7988538b2208c55f2c40ce4f0815901dc88049b
6
reference_url https://moodle.org/mod/forum/discuss.php?d=459500
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-02T13:36:09Z/
url https://moodle.org/mod/forum/discuss.php?d=459500
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38275
reference_id CVE-2024-38275
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38275
8
reference_url https://github.com/advisories/GHSA-p2cj-86v4-7782
reference_id GHSA-p2cj-86v4-7782
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p2cj-86v4-7782
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.11
purl pkg:composer/moodle/moodle@4.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-d92c-j4yy-fud3
24
vulnerability VCID-dky9-v96e-pubh
25
vulnerability VCID-f1da-1duc-2uhb
26
vulnerability VCID-ffp4-23na-rkgr
27
vulnerability VCID-g3km-hbas-x3cg
28
vulnerability VCID-gwnb-e3gt-kqcb
29
vulnerability VCID-gzdw-424p-mqfa
30
vulnerability VCID-hufb-p6pa-63c9
31
vulnerability VCID-j3ts-5ghc-4qct
32
vulnerability VCID-m2a7-q28u-1yfw
33
vulnerability VCID-m3jj-r66a-d7cv
34
vulnerability VCID-m9tk-fa8m-zbah
35
vulnerability VCID-mnx8-118d-efcr
36
vulnerability VCID-pd2f-4kxt-bkgp
37
vulnerability VCID-qruy-fs4p-43h1
38
vulnerability VCID-r4m3-9prr-dkby
39
vulnerability VCID-r5w9-cbyk-hqc6
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-ueyy-v42v-7ydh
44
vulnerability VCID-vsrk-zp7j-w7bk
45
vulnerability VCID-vve8-f9s9-v7ft
46
vulnerability VCID-wby4-h9ud-1yh5
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-yby1-g45r-rugg
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-zjqu-hbpf-9qe1
54
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.11
1
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
2
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
3
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38275, GHSA-p2cj-86v4-7782
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tgs8-3n7x-cyc1
76
url VCID-ueyy-v42v-7ydh
vulnerability_id VCID-ueyy-v42v-7ydh
summary 
Moodle has reflected Cross-site Scripting risk in policy tool
A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3643
reference_id
reference_type
scores
0
value 0.0013
scoring_system epss
scoring_elements 0.32105
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3643
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359742
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359742
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/ff9bbd6d9e7d6267ce85e6c9afbeb19581f2a85f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ff9bbd6d9e7d6267ce85e6c9afbeb19581f2a85f
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467604
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/
url https://moodle.org/mod/forum/discuss.php?d=467604
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3643
reference_id CVE-2025-3643
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:55Z/
url https://access.redhat.com/security/cve/CVE-2025-3643
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3643
reference_id CVE-2025-3643
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3643
7
reference_url https://github.com/advisories/GHSA-hxgg-4qww-85ph
reference_id GHSA-hxgg-4qww-85ph
reference_type
scores
url https://github.com/advisories/GHSA-hxgg-4qww-85ph
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3643, GHSA-hxgg-4qww-85ph
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ueyy-v42v-7ydh
77
url VCID-uhc9-p93a-gbau
vulnerability_id VCID-uhc9-p93a-gbau
summary 
Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter
A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the attacker's. Successful exploitation results in full account takeover. According to the Moodle Releases page, "Bug fixes for security issues in 3.11.x ended 11 December 2023." NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-53021
reference_id
reference_type
scores
0
value 0.00486
scoring_system epss
scoring_elements 0.65773
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-53021
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/releases/tag/v3.11.18
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-24T19:46:30Z/
url https://github.com/moodle/moodle/releases/tag/v3.11.18
3
reference_url https://moodledev.io/general/releases#moodle-311
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-24T19:46:30Z/
url https://moodledev.io/general/releases#moodle-311
4
reference_url https://rentry.co/moodle-oauth2-cve
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-24T19:46:30Z/
url https://rentry.co/moodle-oauth2-cve
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-53021
reference_id CVE-2025-53021
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-53021
6
reference_url https://github.com/advisories/GHSA-cgvv-3455-824j
reference_id GHSA-cgvv-3455-824j
reference_type
scores
url https://github.com/advisories/GHSA-cgvv-3455-824j
fixed_packages
0
url pkg:composer/moodle/moodle@4.0.0
purl pkg:composer/moodle/moodle@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-1wzm-dhqv-43bj
4
vulnerability VCID-21mq-pewz-ekdt
5
vulnerability VCID-24bp-c9yc-gua4
6
vulnerability VCID-29mv-feyq-guew
7
vulnerability VCID-2trf-n9r4-ykgg
8
vulnerability VCID-2urf-d2qr-abdy
9
vulnerability VCID-2wsu-7rzh-h7cs
10
vulnerability VCID-2z6d-qf96-kyb4
11
vulnerability VCID-33ss-gb34-8ke5
12
vulnerability VCID-3ept-fdps-5fe5
13
vulnerability VCID-3nu2-1cwj-sfdd
14
vulnerability VCID-3nvq-s7y5-fufr
15
vulnerability VCID-3yre-ft3n-2fd3
16
vulnerability VCID-44zf-1dw7-qkf5
17
vulnerability VCID-49gk-ugfy-6bcd
18
vulnerability VCID-4c9d-jf9g-u3gn
19
vulnerability VCID-4m9g-bu1c-hbec
20
vulnerability VCID-4svp-grnb-2fh3
21
vulnerability VCID-4zvp-nmrk-4qbq
22
vulnerability VCID-5ba5-pee7-6kh1
23
vulnerability VCID-5bfe-hk7m-7bh6
24
vulnerability VCID-5q1e-b4e8-jbc8
25
vulnerability VCID-5rk8-v6bb-6ugh
26
vulnerability VCID-5s33-v19s-sqd6
27
vulnerability VCID-5snb-dyv3-efe9
28
vulnerability VCID-5xhb-mx3v-fuhs
29
vulnerability VCID-61ry-zz34-8qhj
30
vulnerability VCID-62fw-qwr5-eyc1
31
vulnerability VCID-657g-68tv-dkam
32
vulnerability VCID-6726-ca8y-4uez
33
vulnerability VCID-6cvg-r9am-wbh5
34
vulnerability VCID-6p1s-2r14-z7ax
35
vulnerability VCID-6rc8-bs9z-5bb2
36
vulnerability VCID-7p54-yn8k-aydw
37
vulnerability VCID-7rqc-eepq-43ds
38
vulnerability VCID-7trf-g8dq-tua1
39
vulnerability VCID-7x6e-qege-ufdv
40
vulnerability VCID-86jh-xn5g-kkgc
41
vulnerability VCID-893t-9cja-43g2
42
vulnerability VCID-8d9n-ejbb-7fa1
43
vulnerability VCID-8uah-srba-6ubb
44
vulnerability VCID-9rqr-xzr8-5fgf
45
vulnerability VCID-9xk9-qb9x-jfcs
46
vulnerability VCID-a1ek-x154-5ydy
47
vulnerability VCID-ajrr-8392-kkcw
48
vulnerability VCID-b3vw-8hzh-dybx
49
vulnerability VCID-b994-r5mw-3fbg
50
vulnerability VCID-cbzx-gnhr-pfap
51
vulnerability VCID-d8gp-tuxy-3qdf
52
vulnerability VCID-d92c-j4yy-fud3
53
vulnerability VCID-dky9-v96e-pubh
54
vulnerability VCID-dp61-6ban-cyda
55
vulnerability VCID-dvrf-62nt-2kdp
56
vulnerability VCID-evef-t6cx-vqcc
57
vulnerability VCID-f1da-1duc-2uhb
58
vulnerability VCID-f3b8-bfqu-8qbk
59
vulnerability VCID-ffp4-23na-rkgr
60
vulnerability VCID-g3km-hbas-x3cg
61
vulnerability VCID-gabv-ggbj-ckaj
62
vulnerability VCID-gepg-y7ud-cuds
63
vulnerability VCID-gt5j-wemg-17gx
64
vulnerability VCID-gwnb-e3gt-kqcb
65
vulnerability VCID-gycn-bey2-4yam
66
vulnerability VCID-gzdw-424p-mqfa
67
vulnerability VCID-hmuw-bjax-37bz
68
vulnerability VCID-hsk6-h5ky-g3cx
69
vulnerability VCID-hufb-p6pa-63c9
70
vulnerability VCID-j21p-heue-nqd9
71
vulnerability VCID-j3ts-5ghc-4qct
72
vulnerability VCID-jarn-rtuz-wucq
73
vulnerability VCID-jfsu-ya7r-h3e1
74
vulnerability VCID-jkyc-esnt-p3ay
75
vulnerability VCID-jsza-gn5n-cfac
76
vulnerability VCID-kjd6-4drf-9ycm
77
vulnerability VCID-m2a7-q28u-1yfw
78
vulnerability VCID-m3jj-r66a-d7cv
79
vulnerability VCID-m9tk-fa8m-zbah
80
vulnerability VCID-mhh7-n7ut-hkh6
81
vulnerability VCID-mnx8-118d-efcr
82
vulnerability VCID-ms4e-v5zc-9kgc
83
vulnerability VCID-ngar-aydn-eye4
84
vulnerability VCID-pd2f-4kxt-bkgp
85
vulnerability VCID-pged-191y-quhm
86
vulnerability VCID-q7va-hwg7-fbb4
87
vulnerability VCID-qabh-bpmn-1ye5
88
vulnerability VCID-qruy-fs4p-43h1
89
vulnerability VCID-r1ug-e8x6-83gt
90
vulnerability VCID-r4m3-9prr-dkby
91
vulnerability VCID-r5w9-cbyk-hqc6
92
vulnerability VCID-rm2q-xde7-a3ej
93
vulnerability VCID-rqde-qn4c-pfd9
94
vulnerability VCID-s7pu-hgz5-zfbq
95
vulnerability VCID-sca8-zx4m-sub6
96
vulnerability VCID-sdxf-f1b3-t3cc
97
vulnerability VCID-sgdq-5ha7-nfh2
98
vulnerability VCID-sz1m-v8wf-nqgx
99
vulnerability VCID-t1vq-5b3t-tbfd
100
vulnerability VCID-t8vm-tfnq-5kak
101
vulnerability VCID-team-9wba-yufc
102
vulnerability VCID-tgs8-3n7x-cyc1
103
vulnerability VCID-ucyr-e6qr-5qe1
104
vulnerability VCID-ueyy-v42v-7ydh
105
vulnerability VCID-umd1-pmr4-4bgs
106
vulnerability VCID-utsj-g57g-cbeb
107
vulnerability VCID-vj1z-16nw-5khk
108
vulnerability VCID-vsrk-zp7j-w7bk
109
vulnerability VCID-vve8-f9s9-v7ft
110
vulnerability VCID-wby4-h9ud-1yh5
111
vulnerability VCID-wwny-t2ez-y3e1
112
vulnerability VCID-wwx4-ns21-k3hd
113
vulnerability VCID-wytb-bryq-yqb4
114
vulnerability VCID-x1pc-1kuc-kug2
115
vulnerability VCID-xh4x-t7he-pufq
116
vulnerability VCID-y4g2-328f-qbge
117
vulnerability VCID-yby1-g45r-rugg
118
vulnerability VCID-yc6t-am1p-x3ev
119
vulnerability VCID-yenj-fv96-pbd7
120
vulnerability VCID-ykj6-ptd4-7qfs
121
vulnerability VCID-ytd5-2swj-wkh1
122
vulnerability VCID-yxag-fghx-47ej
123
vulnerability VCID-z5u9-5522-h7fx
124
vulnerability VCID-zjqu-hbpf-9qe1
125
vulnerability VCID-zrjj-atms-8uf9
126
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.0.0
aliases CVE-2025-53021, GHSA-cgvv-3455-824j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uhc9-p93a-gbau
78
url VCID-umd1-pmr4-4bgs
vulnerability_id VCID-umd1-pmr4-4bgs
summary 
Moodle CSRF risk in admin preset tool management of presets
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34001
reference_id
reference_type
scores
0
value 0.00323
scoring_system epss
scoring_elements 0.55654
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34001
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/03e93da556201291e4a345d353a06d08d5d04dd6
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/03e93da556201291e4a345d353a06d08d5d04dd6
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458389
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-01T13:12:28Z/
url https://moodle.org/mod/forum/discuss.php?d=458389
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34001
reference_id CVE-2024-34001
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34001
5
reference_url https://github.com/advisories/GHSA-gq9f-8rj4-w7jc
reference_id GHSA-gq9f-8rj4-w7jc
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gq9f-8rj4-w7jc
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34001, GHSA-gq9f-8rj4-w7jc
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-umd1-pmr4-4bgs
79
url VCID-vsrk-zp7j-w7bk
vulnerability_id VCID-vsrk-zp7j-w7bk
summary 
Moodle IDOR when deleting OAuth2 linked accounts
A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45690
reference_id
reference_type
scores
0
value 0.00393
scoring_system epss
scoring_elements 0.60627
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45690
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2309939
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T14:15:47Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2309939
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/809629e5afcd5be087e65668fe6cf67f2f4f5145
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/809629e5afcd5be087e65668fe6cf67f2f4f5145
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461895#p1854492
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=461895#p1854492
5
reference_url https://moodle.org/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/security
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45690
reference_id CVE-2024-45690
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45690
7
reference_url https://github.com/advisories/GHSA-fhg2-r2h9-h7q8
reference_id GHSA-fhg2-r2h9-h7q8
reference_type
scores
url https://github.com/advisories/GHSA-fhg2-r2h9-h7q8
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.13
purl pkg:composer/moodle/moodle@4.1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-mnx8-118d-efcr
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-t8vm-tfnq-5kak
28
vulnerability VCID-ueyy-v42v-7ydh
29
vulnerability VCID-vve8-f9s9-v7ft
30
vulnerability VCID-wby4-h9ud-1yh5
31
vulnerability VCID-wwx4-ns21-k3hd
32
vulnerability VCID-wytb-bryq-yqb4
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z5u9-5522-h7fx
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.13
1
url pkg:composer/moodle/moodle@4.2.10
purl pkg:composer/moodle/moodle@4.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-9xk9-qb9x-jfcs
4
vulnerability VCID-j3ts-5ghc-4qct
5
vulnerability VCID-m2a7-q28u-1yfw
6
vulnerability VCID-mnx8-118d-efcr
7
vulnerability VCID-t8vm-tfnq-5kak
8
vulnerability VCID-ykj6-ptd4-7qfs
9
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10
2
url pkg:composer/moodle/moodle@4.3.7
purl pkg:composer/moodle/moodle@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-9xk9-qb9x-jfcs
10
vulnerability VCID-a1ek-x154-5ydy
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-ffp4-23na-rkgr
13
vulnerability VCID-gwnb-e3gt-kqcb
14
vulnerability VCID-gzdw-424p-mqfa
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-nctp-rev5-puej
19
vulnerability VCID-pd2f-4kxt-bkgp
20
vulnerability VCID-rcr9-z41f-sqbr
21
vulnerability VCID-sgdq-5ha7-nfh2
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-ueyy-v42v-7ydh
24
vulnerability VCID-vve8-f9s9-v7ft
25
vulnerability VCID-wwx4-ns21-k3hd
26
vulnerability VCID-wytb-bryq-yqb4
27
vulnerability VCID-xqha-pgc4-3udb
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z5u9-5522-h7fx
30
vulnerability VCID-z693-m8fg-63cc
31
vulnerability VCID-zjqu-hbpf-9qe1
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7
3
url pkg:composer/moodle/moodle@4.4.3
purl pkg:composer/moodle/moodle@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dr5e-6s1a-6uas
18
vulnerability VCID-f1da-1duc-2uhb
19
vulnerability VCID-ffp4-23na-rkgr
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-hufb-p6pa-63c9
23
vulnerability VCID-j3ts-5ghc-4qct
24
vulnerability VCID-kwhy-pkt9-1kfe
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-nctp-rev5-puej
28
vulnerability VCID-pd2f-4kxt-bkgp
29
vulnerability VCID-sgdq-5ha7-nfh2
30
vulnerability VCID-t8vm-tfnq-5kak
31
vulnerability VCID-ueyy-v42v-7ydh
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-xqha-pgc4-3udb
37
vulnerability VCID-yby1-g45r-rugg
38
vulnerability VCID-ykj6-ptd4-7qfs
39
vulnerability VCID-z5u9-5522-h7fx
40
vulnerability VCID-z693-m8fg-63cc
41
vulnerability VCID-zjqu-hbpf-9qe1
42
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3
aliases CVE-2024-45690, GHSA-fhg2-r2h9-h7q8
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vsrk-zp7j-w7bk
80
url VCID-vve8-f9s9-v7ft
vulnerability_id VCID-vve8-f9s9-v7ft
summary 
Moodle's AJAX section delete does not respect course_can_delete_section()
A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3644
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38826
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3644
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359745
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359745
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/search?q=repo%3Amoodle%2Fmoodle+MDL-83994&type=commits
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467605
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/
url https://moodle.org/mod/forum/discuss.php?d=467605
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3644
reference_id CVE-2025-3644
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:51Z/
url https://access.redhat.com/security/cve/CVE-2025-3644
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3644
reference_id CVE-2025-3644
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3644
7
reference_url https://github.com/advisories/GHSA-cpm7-mv33-jwf8
reference_id GHSA-cpm7-mv33-jwf8
reference_type
scores
url https://github.com/advisories/GHSA-cpm7-mv33-jwf8
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3644, GHSA-cpm7-mv33-jwf8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vve8-f9s9-v7ft
81
url VCID-wby4-h9ud-1yh5
vulnerability_id VCID-wby4-h9ud-1yh5
summary 
Moodle vulnerable to Cross-site Scripting
A flaw was found in Moodle. This vulnerability, known as Cross-site Scripting (XSS), occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions, the malicious code would execute in their web browsers, potentially compromising their data or leading to unauthorized actions.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67850
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01935
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67850
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423838
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:48Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423838
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/c85f153068a717a3b28bc122e75154bac99e67e1
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c85f153068a717a3b28bc122e75154bac99e67e1
4
reference_url https://moodle.org/mod/forum/discuss.php?d=471300
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471300
5
reference_url https://access.redhat.com/security/cve/CVE-2025-67850
reference_id CVE-2025-67850
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-04T04:55:48Z/
url https://access.redhat.com/security/cve/CVE-2025-67850
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67850
reference_id CVE-2025-67850
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67850
7
reference_url https://github.com/advisories/GHSA-6mmv-f6c6-v6q8
reference_id GHSA-6mmv-f6c6-v6q8
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6mmv-f6c6-v6q8
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67850, GHSA-6mmv-f6c6-v6q8
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wby4-h9ud-1yh5
82
url VCID-wwny-t2ez-y3e1
vulnerability_id VCID-wwny-t2ez-y3e1
summary 
Moodle has insufficient capability checks
A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64984
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64984
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43435
reference_id
reference_type
scores
0
value 0.00529
scoring_system epss
scoring_elements 0.67562
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43435
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304263
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:57:03Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304263
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461205
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:57:03Z/
url https://moodle.org/mod/forum/discuss.php?d=461205
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43435
reference_id CVE-2024-43435
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43435
6
reference_url https://github.com/advisories/GHSA-4gq2-x5w4-7hp8
reference_id GHSA-4gq2-x5w4-7hp8
reference_type
scores
url https://github.com/advisories/GHSA-4gq2-x5w4-7hp8
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.12
purl pkg:composer/moodle/moodle@4.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-f1da-1duc-2uhb
20
vulnerability VCID-ffp4-23na-rkgr
21
vulnerability VCID-gwnb-e3gt-kqcb
22
vulnerability VCID-gzdw-424p-mqfa
23
vulnerability VCID-hufb-p6pa-63c9
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-sgdq-5ha7-nfh2
29
vulnerability VCID-t8vm-tfnq-5kak
30
vulnerability VCID-ueyy-v42v-7ydh
31
vulnerability VCID-vsrk-zp7j-w7bk
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-yby1-g45r-rugg
37
vulnerability VCID-ykj6-ptd4-7qfs
38
vulnerability VCID-z5u9-5522-h7fx
39
vulnerability VCID-zjqu-hbpf-9qe1
40
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.12
1
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
2
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
3
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43435, GHSA-4gq2-x5w4-7hp8
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wwny-t2ez-y3e1
83
url VCID-wwx4-ns21-k3hd
vulnerability_id VCID-wwx4-ns21-k3hd
summary 
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3640
reference_id
reference_type
scores
0
value 0.00163
scoring_system epss
scoring_elements 0.37064
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3640
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359734
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359734
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/64a4311266cbe9a9a942c836931bef224018b77d
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/64a4311266cbe9a9a942c836931bef224018b77d
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467601
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/
url https://moodle.org/mod/forum/discuss.php?d=467601
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3640
reference_id CVE-2025-3640
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:42:58Z/
url https://access.redhat.com/security/cve/CVE-2025-3640
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3640
reference_id CVE-2025-3640
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3640
7
reference_url https://github.com/advisories/GHSA-6g5x-h5x7-q4mq
reference_id GHSA-6g5x-h5x7-q4mq
reference_type
scores
url https://github.com/advisories/GHSA-6g5x-h5x7-q4mq
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3640, GHSA-6g5x-h5x7-q4mq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wwx4-ns21-k3hd
84
url VCID-wytb-bryq-yqb4
vulnerability_id VCID-wytb-bryq-yqb4
summary 
Moodle has a CSRF risk in Brickfield tool's analysis request action
A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3638
reference_id
reference_type
scores
0
value 0.00235
scoring_system epss
scoring_elements 0.4656
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3638
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359732
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359732
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728
reference_id
reference_type
scores
0
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/91e6ad43ed2522f9c1c4094e565b5a7e5b348728
4
reference_url https://moodle.org/mod/forum/discuss.php?d=467600
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/
url https://moodle.org/mod/forum/discuss.php?d=467600
5
reference_url https://access.redhat.com/security/cve/CVE-2025-3638
reference_id CVE-2025-3638
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-25T15:51:01Z/
url https://access.redhat.com/security/cve/CVE-2025-3638
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3638
reference_id CVE-2025-3638
reference_type
scores
0
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3638
7
reference_url https://github.com/advisories/GHSA-m8qh-hx4c-h9hr
reference_id GHSA-m8qh-hx4c-h9hr
reference_type
scores
url https://github.com/advisories/GHSA-m8qh-hx4c-h9hr
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3638, GHSA-m8qh-hx4c-h9hr
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wytb-bryq-yqb4
85
url VCID-y4g2-328f-qbge
vulnerability_id VCID-y4g2-328f-qbge
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80712
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80712
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34003
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.39039
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34003
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458391
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-01T13:16:51Z/
url https://moodle.org/mod/forum/discuss.php?d=458391
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34003
reference_id CVE-2024-34003
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34003
5
reference_url https://github.com/advisories/GHSA-jg4f-8w9x-jv35
reference_id GHSA-jg4f-8w9x-jv35
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jg4f-8w9x-jv35
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34003, GHSA-jg4f-8w9x-jv35
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y4g2-328f-qbge
86
url VCID-yby1-g45r-rugg
vulnerability_id VCID-yby1-g45r-rugg
summary 
Moodle vulnerable to Cross-site Scripting
A flaw was found in Moodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the policy tool return URL. This vulnerability arises from insufficient sanitization of URL parameters, allowing attackers to inject malicious scripts through specially crafted links. Successful exploitation could lead to information disclosure or arbitrary client-side script execution within the user's browser.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67855
reference_id
reference_type
scores
0
value 0.00038
scoring_system epss
scoring_elements 0.118
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67855
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2423861
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:09Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2423861
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/0c146aa2612fb6d0544f200a018cb42da75db713
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0c146aa2612fb6d0544f200a018cb42da75db713
4
reference_url https://moodle.org/mod/forum/discuss.php?d=471305
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471305
5
reference_url https://access.redhat.com/security/cve/CVE-2025-67855
reference_id CVE-2025-67855
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T15:43:09Z/
url https://access.redhat.com/security/cve/CVE-2025-67855
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67855
reference_id CVE-2025-67855
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67855
7
reference_url https://github.com/advisories/GHSA-vwhw-vp9v-q9c9
reference_id GHSA-vwhw-vp9v-q9c9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vwhw-vp9v-q9c9
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67855, GHSA-vwhw-vp9v-q9c9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yby1-g45r-rugg
87
url VCID-yc6t-am1p-x3ev
vulnerability_id VCID-yc6t-am1p-x3ev
summary 
Authorization Bypass in moodle
Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25983
reference_id
reference_type
scores
0
value 0.00241
scoring_system epss
scoring_elements 0.47572
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25983
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264099
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264099
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/4cae44dd0e9a7da47d08d9b75e0ebba0e4b422f4
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/4cae44dd0e9a7da47d08d9b75e0ebba0e4b422f4
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455641
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url https://moodle.org/mod/forum/discuss.php?d=455641
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25983
reference_id CVE-2024-25983
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25983
8
reference_url https://github.com/advisories/GHSA-9r26-5w88-qhp9
reference_id GHSA-9r26-5w88-qhp9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9r26-5w88-qhp9
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.9
purl pkg:composer/moodle/moodle@4.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5ba5-pee7-6kh1
13
vulnerability VCID-5s33-v19s-sqd6
14
vulnerability VCID-5snb-dyv3-efe9
15
vulnerability VCID-5xhb-mx3v-fuhs
16
vulnerability VCID-61ry-zz34-8qhj
17
vulnerability VCID-657g-68tv-dkam
18
vulnerability VCID-6cvg-r9am-wbh5
19
vulnerability VCID-6p1s-2r14-z7ax
20
vulnerability VCID-7p54-yn8k-aydw
21
vulnerability VCID-7trf-g8dq-tua1
22
vulnerability VCID-893t-9cja-43g2
23
vulnerability VCID-8uah-srba-6ubb
24
vulnerability VCID-9rqr-xzr8-5fgf
25
vulnerability VCID-9xk9-qb9x-jfcs
26
vulnerability VCID-a1ek-x154-5ydy
27
vulnerability VCID-ajrr-8392-kkcw
28
vulnerability VCID-b3vw-8hzh-dybx
29
vulnerability VCID-d92c-j4yy-fud3
30
vulnerability VCID-dky9-v96e-pubh
31
vulnerability VCID-dp61-6ban-cyda
32
vulnerability VCID-evef-t6cx-vqcc
33
vulnerability VCID-f1da-1duc-2uhb
34
vulnerability VCID-ffp4-23na-rkgr
35
vulnerability VCID-g3km-hbas-x3cg
36
vulnerability VCID-gwnb-e3gt-kqcb
37
vulnerability VCID-gzdw-424p-mqfa
38
vulnerability VCID-hmuw-bjax-37bz
39
vulnerability VCID-hufb-p6pa-63c9
40
vulnerability VCID-j3ts-5ghc-4qct
41
vulnerability VCID-jkyc-esnt-p3ay
42
vulnerability VCID-m2a7-q28u-1yfw
43
vulnerability VCID-m3jj-r66a-d7cv
44
vulnerability VCID-m9tk-fa8m-zbah
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-pd2f-4kxt-bkgp
48
vulnerability VCID-pged-191y-quhm
49
vulnerability VCID-qruy-fs4p-43h1
50
vulnerability VCID-r4m3-9prr-dkby
51
vulnerability VCID-r5w9-cbyk-hqc6
52
vulnerability VCID-rm2q-xde7-a3ej
53
vulnerability VCID-sdxf-f1b3-t3cc
54
vulnerability VCID-sgdq-5ha7-nfh2
55
vulnerability VCID-t8vm-tfnq-5kak
56
vulnerability VCID-team-9wba-yufc
57
vulnerability VCID-tgs8-3n7x-cyc1
58
vulnerability VCID-ueyy-v42v-7ydh
59
vulnerability VCID-umd1-pmr4-4bgs
60
vulnerability VCID-vsrk-zp7j-w7bk
61
vulnerability VCID-vve8-f9s9-v7ft
62
vulnerability VCID-wby4-h9ud-1yh5
63
vulnerability VCID-wwny-t2ez-y3e1
64
vulnerability VCID-wwx4-ns21-k3hd
65
vulnerability VCID-wytb-bryq-yqb4
66
vulnerability VCID-y4g2-328f-qbge
67
vulnerability VCID-yby1-g45r-rugg
68
vulnerability VCID-ykj6-ptd4-7qfs
69
vulnerability VCID-ytd5-2swj-wkh1
70
vulnerability VCID-z5u9-5522-h7fx
71
vulnerability VCID-zjqu-hbpf-9qe1
72
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.9
1
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
2
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25983, GHSA-9r26-5w88-qhp9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yc6t-am1p-x3ev
88
url VCID-ykj6-ptd4-7qfs
vulnerability_id VCID-ykj6-ptd4-7qfs
summary 
Moodle affected by a code injection vulnerability
A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67847
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.08982
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67847
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=471297#p1892199
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471297#p1892199
3
reference_url https://access.redhat.com/security/cve/CVE-2025-67847
reference_id CVE-2025-67847
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-24T04:55:19Z/
url https://access.redhat.com/security/cve/CVE-2025-67847
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67847
reference_id CVE-2025-67847
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67847
5
reference_url https://github.com/advisories/GHSA-xvmh-25jw-gmmm
reference_id GHSA-xvmh-25jw-gmmm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xvmh-25jw-gmmm
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.22
purl pkg:composer/moodle/moodle@4.1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.22
1
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
2
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
3
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
4
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67847, GHSA-xvmh-25jw-gmmm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ykj6-ptd4-7qfs
89
url VCID-ytd5-2swj-wkh1
vulnerability_id VCID-ytd5-2swj-wkh1
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34004
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54226
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34004
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=458393
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T14:26:27Z/
url https://moodle.org/mod/forum/discuss.php?d=458393
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34004
reference_id CVE-2024-34004
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34004
4
reference_url https://github.com/advisories/GHSA-q3cm-ccrm-2mr6
reference_id GHSA-q3cm-ccrm-2mr6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q3cm-ccrm-2mr6
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.10
purl pkg:composer/moodle/moodle@4.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-44zf-1dw7-qkf5
11
vulnerability VCID-4zvp-nmrk-4qbq
12
vulnerability VCID-5snb-dyv3-efe9
13
vulnerability VCID-5xhb-mx3v-fuhs
14
vulnerability VCID-61ry-zz34-8qhj
15
vulnerability VCID-657g-68tv-dkam
16
vulnerability VCID-6cvg-r9am-wbh5
17
vulnerability VCID-6p1s-2r14-z7ax
18
vulnerability VCID-7p54-yn8k-aydw
19
vulnerability VCID-7trf-g8dq-tua1
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-d92c-j4yy-fud3
26
vulnerability VCID-dky9-v96e-pubh
27
vulnerability VCID-f1da-1duc-2uhb
28
vulnerability VCID-ffp4-23na-rkgr
29
vulnerability VCID-g3km-hbas-x3cg
30
vulnerability VCID-gwnb-e3gt-kqcb
31
vulnerability VCID-gzdw-424p-mqfa
32
vulnerability VCID-hufb-p6pa-63c9
33
vulnerability VCID-j3ts-5ghc-4qct
34
vulnerability VCID-m2a7-q28u-1yfw
35
vulnerability VCID-m3jj-r66a-d7cv
36
vulnerability VCID-m9tk-fa8m-zbah
37
vulnerability VCID-mnx8-118d-efcr
38
vulnerability VCID-pd2f-4kxt-bkgp
39
vulnerability VCID-pged-191y-quhm
40
vulnerability VCID-qruy-fs4p-43h1
41
vulnerability VCID-r4m3-9prr-dkby
42
vulnerability VCID-r5w9-cbyk-hqc6
43
vulnerability VCID-rm2q-xde7-a3ej
44
vulnerability VCID-sdxf-f1b3-t3cc
45
vulnerability VCID-sgdq-5ha7-nfh2
46
vulnerability VCID-t8vm-tfnq-5kak
47
vulnerability VCID-tgs8-3n7x-cyc1
48
vulnerability VCID-ueyy-v42v-7ydh
49
vulnerability VCID-vsrk-zp7j-w7bk
50
vulnerability VCID-vve8-f9s9-v7ft
51
vulnerability VCID-wby4-h9ud-1yh5
52
vulnerability VCID-wwny-t2ez-y3e1
53
vulnerability VCID-wwx4-ns21-k3hd
54
vulnerability VCID-wytb-bryq-yqb4
55
vulnerability VCID-yby1-g45r-rugg
56
vulnerability VCID-ykj6-ptd4-7qfs
57
vulnerability VCID-z5u9-5522-h7fx
58
vulnerability VCID-zjqu-hbpf-9qe1
59
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.10
1
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
2
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34004, GHSA-q3cm-ccrm-2mr6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ytd5-2swj-wkh1
90
url VCID-z5u9-5522-h7fx
vulnerability_id VCID-z5u9-5522-h7fx
summary 
moodle: Some users can delete audiences of other reports
A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48898
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48898
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318820
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:56:14Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318820
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48898
reference_id CVE-2024-48898
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48898
4
reference_url https://github.com/advisories/GHSA-fjq9-452g-jg3q
reference_id GHSA-fjq9-452g-jg3q
reference_type
scores
url https://github.com/advisories/GHSA-fjq9-452g-jg3q
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.14
purl pkg:composer/moodle/moodle@4.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-gwnb-e3gt-kqcb
19
vulnerability VCID-gzdw-424p-mqfa
20
vulnerability VCID-hufb-p6pa-63c9
21
vulnerability VCID-j3ts-5ghc-4qct
22
vulnerability VCID-m2a7-q28u-1yfw
23
vulnerability VCID-pd2f-4kxt-bkgp
24
vulnerability VCID-sgdq-5ha7-nfh2
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vve8-f9s9-v7ft
27
vulnerability VCID-wby4-h9ud-1yh5
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-yby1-g45r-rugg
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-zjqu-hbpf-9qe1
33
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.14
1
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
2
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
3
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48898, GHSA-fjq9-452g-jg3q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z5u9-5522-h7fx
91
url VCID-zjqu-hbpf-9qe1
vulnerability_id VCID-zjqu-hbpf-9qe1
summary 
Moodle has a stored XSS risk in admin live log
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:38Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84145
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-26529
reference_id
reference_type
scores
0
value 0.00961
scoring_system epss
scoring_elements 0.7687
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-26529
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=466145
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-24T20:05:38Z/
url https://moodle.org/mod/forum/discuss.php?d=466145
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-26529
reference_id CVE-2025-26529
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-26529
5
reference_url https://github.com/advisories/GHSA-wr88-x8cm-7cgq
reference_id GHSA-wr88-x8cm-7cgq
reference_type
scores
url https://github.com/advisories/GHSA-wr88-x8cm-7cgq
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.16
purl pkg:composer/moodle/moodle@4.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-f1da-1duc-2uhb
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-hufb-p6pa-63c9
16
vulnerability VCID-j3ts-5ghc-4qct
17
vulnerability VCID-m2a7-q28u-1yfw
18
vulnerability VCID-ueyy-v42v-7ydh
19
vulnerability VCID-vve8-f9s9-v7ft
20
vulnerability VCID-wby4-h9ud-1yh5
21
vulnerability VCID-wwx4-ns21-k3hd
22
vulnerability VCID-wytb-bryq-yqb4
23
vulnerability VCID-yby1-g45r-rugg
24
vulnerability VCID-ykj6-ptd4-7qfs
25
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.16
1
url pkg:composer/moodle/moodle@4.3.10
purl pkg:composer/moodle/moodle@4.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-7trf-g8dq-tua1
7
vulnerability VCID-dky9-v96e-pubh
8
vulnerability VCID-ffp4-23na-rkgr
9
vulnerability VCID-j3ts-5ghc-4qct
10
vulnerability VCID-m2a7-q28u-1yfw
11
vulnerability VCID-rcr9-z41f-sqbr
12
vulnerability VCID-ueyy-v42v-7ydh
13
vulnerability VCID-vve8-f9s9-v7ft
14
vulnerability VCID-wwx4-ns21-k3hd
15
vulnerability VCID-wytb-bryq-yqb4
16
vulnerability VCID-xqha-pgc4-3udb
17
vulnerability VCID-ykj6-ptd4-7qfs
18
vulnerability VCID-z693-m8fg-63cc
19
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.10
2
url pkg:composer/moodle/moodle@4.4.6
purl pkg:composer/moodle/moodle@4.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-dky9-v96e-pubh
13
vulnerability VCID-dr5e-6s1a-6uas
14
vulnerability VCID-f1da-1duc-2uhb
15
vulnerability VCID-ffp4-23na-rkgr
16
vulnerability VCID-hufb-p6pa-63c9
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-ueyy-v42v-7ydh
20
vulnerability VCID-vve8-f9s9-v7ft
21
vulnerability VCID-wby4-h9ud-1yh5
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-yby1-g45r-rugg
26
vulnerability VCID-ykj6-ptd4-7qfs
27
vulnerability VCID-z693-m8fg-63cc
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.6
3
url pkg:composer/moodle/moodle@4.5.2
purl pkg:composer/moodle/moodle@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3m96-nmxm-tfgz
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-dr5e-6s1a-6uas
15
vulnerability VCID-ey6g-spfk-7bcw
16
vulnerability VCID-f1da-1duc-2uhb
17
vulnerability VCID-ffp4-23na-rkgr
18
vulnerability VCID-hufb-p6pa-63c9
19
vulnerability VCID-j3ts-5ghc-4qct
20
vulnerability VCID-m2a7-q28u-1yfw
21
vulnerability VCID-rgq5-458d-1fhg
22
vulnerability VCID-ueyy-v42v-7ydh
23
vulnerability VCID-vve8-f9s9-v7ft
24
vulnerability VCID-wby4-h9ud-1yh5
25
vulnerability VCID-wjby-arfq-buby
26
vulnerability VCID-wwx4-ns21-k3hd
27
vulnerability VCID-wytb-bryq-yqb4
28
vulnerability VCID-xqha-pgc4-3udb
29
vulnerability VCID-yby1-g45r-rugg
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z693-m8fg-63cc
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.2
aliases CVE-2025-26529, GHSA-wr88-x8cm-7cgq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zjqu-hbpf-9qe1
92
url VCID-zrjj-atms-8uf9
vulnerability_id VCID-zrjj-atms-8uf9
summary 
Moodle allows IDOR in RSS block, which allows access to additional RSS feeds
A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-3636
reference_id
reference_type
scores
0
value 0.00102
scoring_system epss
scoring_elements 0.2771
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-3636
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2359726
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2359726
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/0bd97209ac5e217dbec236c73e4f6fdcaee1c737
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0bd97209ac5e217dbec236c73e4f6fdcaee1c737
5
reference_url https://moodle.org/mod/forum/discuss.php?d=467598
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=467598
6
reference_url https://access.redhat.com/security/cve/CVE-2025-3636
reference_id CVE-2025-3636
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T15:43:06Z/
url https://access.redhat.com/security/cve/CVE-2025-3636
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-3636
reference_id CVE-2025-3636
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-3636
8
reference_url https://github.com/advisories/GHSA-chmf-m33p-ph8m
reference_id GHSA-chmf-m33p-ph8m
reference_type
scores
url https://github.com/advisories/GHSA-chmf-m33p-ph8m
fixed_packages
0
url pkg:composer/moodle/moodle@4.1.18
purl pkg:composer/moodle/moodle@4.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-f1da-1duc-2uhb
9
vulnerability VCID-hufb-p6pa-63c9
10
vulnerability VCID-j3ts-5ghc-4qct
11
vulnerability VCID-m2a7-q28u-1yfw
12
vulnerability VCID-wby4-h9ud-1yh5
13
vulnerability VCID-yby1-g45r-rugg
14
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.1.18
1
url pkg:composer/moodle/moodle@4.3.12
purl pkg:composer/moodle/moodle@4.3.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.12
2
url pkg:composer/moodle/moodle@4.4.8
purl pkg:composer/moodle/moodle@4.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-44zf-1dw7-qkf5
2
vulnerability VCID-4zvp-nmrk-4qbq
3
vulnerability VCID-5snb-dyv3-efe9
4
vulnerability VCID-5xhb-mx3v-fuhs
5
vulnerability VCID-61ry-zz34-8qhj
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-dr5e-6s1a-6uas
9
vulnerability VCID-f1da-1duc-2uhb
10
vulnerability VCID-hufb-p6pa-63c9
11
vulnerability VCID-j3ts-5ghc-4qct
12
vulnerability VCID-m2a7-q28u-1yfw
13
vulnerability VCID-wby4-h9ud-1yh5
14
vulnerability VCID-yby1-g45r-rugg
15
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.8
3
url pkg:composer/moodle/moodle@4.5.4
purl pkg:composer/moodle/moodle@4.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-3m96-nmxm-tfgz
2
vulnerability VCID-44zf-1dw7-qkf5
3
vulnerability VCID-4zvp-nmrk-4qbq
4
vulnerability VCID-5snb-dyv3-efe9
5
vulnerability VCID-5xhb-mx3v-fuhs
6
vulnerability VCID-61ry-zz34-8qhj
7
vulnerability VCID-657g-68tv-dkam
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-dr5e-6s1a-6uas
10
vulnerability VCID-ey6g-spfk-7bcw
11
vulnerability VCID-f1da-1duc-2uhb
12
vulnerability VCID-hufb-p6pa-63c9
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-wby4-h9ud-1yh5
16
vulnerability VCID-yby1-g45r-rugg
17
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.4
aliases CVE-2025-3636, GHSA-chmf-m33p-ph8m
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zrjj-atms-8uf9
93
url VCID-ztjp-76rp-hfhk
vulnerability_id VCID-ztjp-76rp-hfhk
summary 
Moodle Improper Access Control vulnerability
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:05:11Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5542
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50567
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5542
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243441
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:05:11Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243441
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/b0bb97ee3b481dd85d8f1ed3612f70c9d1939014
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/b0bb97ee3b481dd85d8f1ed3612f70c9d1939014
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451583
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:05:11Z/
url https://moodle.org/mod/forum/discuss.php?d=451583
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5542
reference_id CVE-2023-5542
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5542
7
reference_url https://github.com/advisories/GHSA-8mm2-m2gp-c6x2
reference_id GHSA-8mm2-m2gp-c6x2
reference_type
scores
url https://github.com/advisories/GHSA-8mm2-m2gp-c6x2
fixed_packages
0
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5542, GHSA-8mm2-m2gp-c6x2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ztjp-76rp-hfhk
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.10.0-beta