VulnerableCode Package Details - pkg:composer/moodle/moodle@2.7.16

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/moodle/moodle@2.7.16

purl	pkg:composer/moodle/moodle@2.7.16

Next non-vulnerable version	2.7.19
Latest non-vulnerable version	5.1.2
Risk

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-v54t-5thx-1beu Aliases: CVE-2016-8642 GHSA-x32v-7qw8-cpq8	Improper Access Control In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.	2.7.17 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.9.9 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 3.0.7 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 3.1.3 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-v54t-5thx-1beu
Aliases:
CVE-2016-8642
GHSA-x32v-7qw8-cpq8

Improper Access Control In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.

2.7.17
Affected by 1 other vulnerability.

2.9.9
Affected by 1 other vulnerability.

3.0.7
Affected by 1 other vulnerability.

3.1.3
Affected by 2 other vulnerabilities.

Vulnerabilities fixed by this package (1)

Vulnerability	Summary	Aliases
VCID-vb67-yux5-ayhf	Weak Password Recovery Mechanism for Forgotten Password In Moodle, web service tokens are not invalidated when the user password is changed or forced to be changed.	CVE-2016-7038

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-02T04:42:45.225947+00:00	GitLab Importer	Affected by	VCID-v54t-5thx-1beu	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2016-8642.yml	38.6.0
2026-06-02T04:36:46.046842+00:00	GitLab Importer	Fixing	VCID-vb67-yux5-ayhf	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2016-7038.yml	38.6.0