Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/moodle/moodle@3.4.1
Typecomposer
Namespacemoodle
Namemoodle
Version3.4.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.4.3
Latest_non_vulnerable_version5.1.2
Affected_by_vulnerabilities
0
url VCID-fygy-9njn-abgd
vulnerability_id VCID-fygy-9njn-abgd
summary 
Improper Authentication
A flaw was found in Moodle. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.
references
0
reference_url https://moodle.org/mod/forum/discuss.php?d=367939
reference_id
reference_type
scores
url https://moodle.org/mod/forum/discuss.php?d=367939
1
reference_url http://www.securityfocus.com/bid/103725
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/103725
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1082
reference_id CVE-2018-1082
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1082
fixed_packages
0
url pkg:composer/moodle/moodle@3.4.2
purl pkg:composer/moodle/moodle@3.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b7br-bh2d-rygp
1
vulnerability VCID-ckg1-9vpt-yfdk
2
vulnerability VCID-fegs-ubsk-63hu
3
vulnerability VCID-g8ct-c4ce-zuaf
4
vulnerability VCID-p2gd-7uam-mqf8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.2
aliases CVE-2018-1082
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fygy-9njn-abgd
1
url VCID-m4zv-e3dn-budf
vulnerability_id VCID-m4zv-e3dn-budf
summary 
Improper Access Control
Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.
references
0
reference_url https://moodle.org/mod/forum/discuss.php?d=367938
reference_id
reference_type
scores
url https://moodle.org/mod/forum/discuss.php?d=367938
1
reference_url http://www.securityfocus.com/bid/103728
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/103728
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1081
reference_id CVE-2018-1081
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1081
fixed_packages
0
url pkg:composer/moodle/moodle@3.4.2
purl pkg:composer/moodle/moodle@3.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b7br-bh2d-rygp
1
vulnerability VCID-ckg1-9vpt-yfdk
2
vulnerability VCID-fegs-ubsk-63hu
3
vulnerability VCID-g8ct-c4ce-zuaf
4
vulnerability VCID-p2gd-7uam-mqf8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.2
aliases CVE-2018-1081
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m4zv-e3dn-budf
Fixing_vulnerabilities
0
url VCID-duna-st9c-mqbk
vulnerability_id VCID-duna-st9c-mqbk
summary 
Information Exposure
In Moodle, the quiz web services allow students to see quiz results when it is prohibited in the settings.
references
0
reference_url https://moodle.org/mod/forum/discuss.php?d=364383
reference_id
reference_type
scores
url https://moodle.org/mod/forum/discuss.php?d=364383
1
reference_url http://www.securityfocus.com/bid/102754
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/102754
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1044
reference_id CVE-2018-1044
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1044
fixed_packages
0
url pkg:composer/moodle/moodle@3.1.10
purl pkg:composer/moodle/moodle@3.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10
1
url pkg:composer/moodle/moodle@3.2.7
purl pkg:composer/moodle/moodle@3.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7
2
url pkg:composer/moodle/moodle@3.3.4
purl pkg:composer/moodle/moodle@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fygy-9njn-abgd
1
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4
3
url pkg:composer/moodle/moodle@3.4.1
purl pkg:composer/moodle/moodle@3.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fygy-9njn-abgd
1
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1
aliases CVE-2018-1044
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-duna-st9c-mqbk
1
url VCID-nc2j-pay7-ryab
vulnerability_id VCID-nc2j-pay7-ryab
summary 
Insufficient Access Control
The setting for blocked hosts list can be bypassed with multiple A record `hostnames`.
references
0
reference_url https://moodle.org/mod/forum/discuss.php?d=364382
reference_id
reference_type
scores
url https://moodle.org/mod/forum/discuss.php?d=364382
1
reference_url http://www.securityfocus.com/bid/102769
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/102769
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1043
reference_id CVE-2018-1043
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1043
fixed_packages
0
url pkg:composer/moodle/moodle@3.2.7
purl pkg:composer/moodle/moodle@3.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7
1
url pkg:composer/moodle/moodle@3.3.4
purl pkg:composer/moodle/moodle@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fygy-9njn-abgd
1
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4
2
url pkg:composer/moodle/moodle@3.4.1
purl pkg:composer/moodle/moodle@3.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fygy-9njn-abgd
1
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1
aliases CVE-2018-1043
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nc2j-pay7-ryab
2
url VCID-yghg-775s-vber
vulnerability_id VCID-yghg-775s-vber
summary 
Server-Side Request Forgery (SSRF)
Moodle has Server Side Request Forgery in the `filepicker`.
references
0
reference_url https://moodle.org/mod/forum/discuss.php?d=364381
reference_id
reference_type
scores
url https://moodle.org/mod/forum/discuss.php?d=364381
1
reference_url http://www.securityfocus.com/bid/102752
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/102752
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1042
reference_id CVE-2018-1042
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1042
fixed_packages
0
url pkg:composer/moodle/moodle@3.1.10
purl pkg:composer/moodle/moodle@3.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.1.10
1
url pkg:composer/moodle/moodle@3.2.7
purl pkg:composer/moodle/moodle@3.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.2.7
2
url pkg:composer/moodle/moodle@3.3.4
purl pkg:composer/moodle/moodle@3.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fygy-9njn-abgd
1
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.3.4
3
url pkg:composer/moodle/moodle@3.4.1
purl pkg:composer/moodle/moodle@3.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fygy-9njn-abgd
1
vulnerability VCID-m4zv-e3dn-budf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1
aliases CVE-2018-1042
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yghg-775s-vber
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@3.4.1