Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@3.2.1
purl pkg:composer/moodle/moodle@3.2.1
Next non-vulnerable version 3.2.9
Latest non-vulnerable version 3.11.6
Risk
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-2qjr-wjh1-8fh6
Aliases:
CVE-2017-2643
Information Exposure In Moodle global search displays user names for unauthenticated users.
3.2.2
Affected by 4 other vulnerabilities.
VCID-dhku-uah4-ykh8
Aliases:
CVE-2017-2641
SQL Injection An SQL injection can occur via user preferences.
3.2.2
Affected by 4 other vulnerabilities.
VCID-jn5n-6hg9-tyf7
Aliases:
CVE-2017-2644
Cross-site Scripting An XSS can occur via evidence of prior learning.
3.2.2
Affected by 4 other vulnerabilities.
VCID-x927-nh46-7fdy
Aliases:
CVE-2017-2645
Cross-site Scripting In Moodle, an XSS can occur via attachments to evidence of prior learning.
3.2.2
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-65y9-9ur2-pugc Improper Input Validation There is incorrect sanitization of attributes in forums. CVE-2017-2576
VCID-e2zc-7ujn-wybu Cross-site Scripting There is XSS in the assignment submission page. CVE-2017-2578