Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/moodle/moodle@4.2.2
Typecomposer
Namespacemoodle
Namemoodle
Version4.2.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.5.9
Latest_non_vulnerable_version5.1.2
Affected_by_vulnerabilities
0
url VCID-1efm-18zh-w7gm
vulnerability_id VCID-1efm-18zh-w7gm
summary Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62400
reference_id
reference_type
scores
0
value 0.00059
scoring_system epss
scoring_elements 0.18843
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62400
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404433
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404433
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0c70d67059658879a71152ea075c74154a627d05
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470389
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470389
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62400
reference_id CVE-2025-62400
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:48:02Z/
url https://access.redhat.com/security/cve/CVE-2025-62400
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62400
reference_id CVE-2025-62400
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62400
7
reference_url https://github.com/advisories/GHSA-422v-w6c5-vq42
reference_id GHSA-422v-w6c5-vq42
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-422v-w6c5-vq42
fixed_packages
0
url pkg:composer/moodle/moodle@4.4.11
purl pkg:composer/moodle/moodle@4.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11
1
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
2
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62400, GHSA-422v-w6c5-vq42
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1efm-18zh-w7gm
1
url VCID-21mq-pewz-ekdt
vulnerability_id VCID-21mq-pewz-ekdt
summary 
Moodle Cross-site Scripting vulnerability
A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81394
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43437
reference_id
reference_type
scores
0
value 0.01529
scoring_system epss
scoring_elements 0.81662
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43437
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304266
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-11T14:28:15Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304266
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461207
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-11T14:28:15Z/
url https://moodle.org/mod/forum/discuss.php?d=461207
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43437
reference_id CVE-2024-43437
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43437
6
reference_url https://github.com/advisories/GHSA-4hjf-6pxr-549h
reference_id GHSA-4hjf-6pxr-549h
reference_type
scores
url https://github.com/advisories/GHSA-4hjf-6pxr-549h
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43437, GHSA-4hjf-6pxr-549h
risk_score 2.5
exploitability 0.5
weighted_severity 4.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-21mq-pewz-ekdt
2
url VCID-24bp-c9yc-gua4
vulnerability_id VCID-24bp-c9yc-gua4
summary 
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78820
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:58:29Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78820
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5545
reference_id
reference_type
scores
0
value 0.00277
scoring_system epss
scoring_elements 0.51423
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5545
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243444
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:58:29Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243444
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/100ac7c6467a7de2c05713a0a924984ff1593d53
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/100ac7c6467a7de2c05713a0a924984ff1593d53
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451586
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:58:29Z/
url https://moodle.org/mod/forum/discuss.php?d=451586
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5545
reference_id CVE-2023-5545
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5545
7
reference_url https://github.com/advisories/GHSA-26fg-v32r-h663
reference_id GHSA-26fg-v32r-h663
reference_type
scores
url https://github.com/advisories/GHSA-26fg-v32r-h663
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5545, GHSA-26fg-v32r-h663
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-24bp-c9yc-gua4
3
url VCID-2urf-d2qr-abdy
vulnerability_id VCID-2urf-d2qr-abdy
summary 
Moodle Lesson activity password bypass through PHP loose comparison
A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45691
reference_id
reference_type
scores
0
value 0.00387
scoring_system epss
scoring_elements 0.60204
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45691
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2309940
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:16Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2309940
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/3fc1073d304f660d2552b591c5fb92547ed01e92
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/3fc1073d304f660d2552b591c5fb92547ed01e92
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461897#p1854494
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=461897#p1854494
5
reference_url https://moodle.org/security
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/security
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45691
reference_id CVE-2024-45691
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45691
7
reference_url https://github.com/advisories/GHSA-xfv7-h2qg-rjm7
reference_id GHSA-xfv7-h2qg-rjm7
reference_type
scores
url https://github.com/advisories/GHSA-xfv7-h2qg-rjm7
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.10
purl pkg:composer/moodle/moodle@4.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-9xk9-qb9x-jfcs
4
vulnerability VCID-j3ts-5ghc-4qct
5
vulnerability VCID-m2a7-q28u-1yfw
6
vulnerability VCID-mnx8-118d-efcr
7
vulnerability VCID-t8vm-tfnq-5kak
8
vulnerability VCID-ykj6-ptd4-7qfs
9
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10
1
url pkg:composer/moodle/moodle@4.3.7
purl pkg:composer/moodle/moodle@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-9xk9-qb9x-jfcs
10
vulnerability VCID-a1ek-x154-5ydy
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-ffp4-23na-rkgr
13
vulnerability VCID-gwnb-e3gt-kqcb
14
vulnerability VCID-gzdw-424p-mqfa
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-nctp-rev5-puej
19
vulnerability VCID-pd2f-4kxt-bkgp
20
vulnerability VCID-rcr9-z41f-sqbr
21
vulnerability VCID-sgdq-5ha7-nfh2
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-ueyy-v42v-7ydh
24
vulnerability VCID-vve8-f9s9-v7ft
25
vulnerability VCID-wwx4-ns21-k3hd
26
vulnerability VCID-wytb-bryq-yqb4
27
vulnerability VCID-xqha-pgc4-3udb
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z5u9-5522-h7fx
30
vulnerability VCID-z693-m8fg-63cc
31
vulnerability VCID-zjqu-hbpf-9qe1
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7
2
url pkg:composer/moodle/moodle@4.4.3
purl pkg:composer/moodle/moodle@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dr5e-6s1a-6uas
18
vulnerability VCID-f1da-1duc-2uhb
19
vulnerability VCID-ffp4-23na-rkgr
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-hufb-p6pa-63c9
23
vulnerability VCID-j3ts-5ghc-4qct
24
vulnerability VCID-kwhy-pkt9-1kfe
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-nctp-rev5-puej
28
vulnerability VCID-pd2f-4kxt-bkgp
29
vulnerability VCID-sgdq-5ha7-nfh2
30
vulnerability VCID-t8vm-tfnq-5kak
31
vulnerability VCID-ueyy-v42v-7ydh
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-xqha-pgc4-3udb
37
vulnerability VCID-yby1-g45r-rugg
38
vulnerability VCID-ykj6-ptd4-7qfs
39
vulnerability VCID-z5u9-5522-h7fx
40
vulnerability VCID-z693-m8fg-63cc
41
vulnerability VCID-zjqu-hbpf-9qe1
42
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3
aliases CVE-2024-45691, GHSA-xfv7-h2qg-rjm7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2urf-d2qr-abdy
4
url VCID-2wsu-7rzh-h7cs
vulnerability_id VCID-2wsu-7rzh-h7cs
summary 
Moodle has user information visibility control issues in gradebook reports
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43429
reference_id
reference_type
scores
0
value 0.00296
scoring_system epss
scoring_elements 0.53232
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43429
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304257
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:15:16Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304257
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461197
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:15:16Z/
url https://moodle.org/mod/forum/discuss.php?d=461197
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43429
reference_id CVE-2024-43429
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43429
6
reference_url https://github.com/advisories/GHSA-c767-4whh-v7rw
reference_id GHSA-c767-4whh-v7rw
reference_type
scores
url https://github.com/advisories/GHSA-c767-4whh-v7rw
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43429, GHSA-c767-4whh-v7rw
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2wsu-7rzh-h7cs
5
url VCID-3nu2-1cwj-sfdd
vulnerability_id VCID-3nu2-1cwj-sfdd
summary 
Moodle BigBlueButton web service leaks meeting joining information
Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38273
reference_id
reference_type
scores
0
value 0.00199
scoring_system epss
scoring_elements 0.4198
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38273
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/500cec575731fd8575569dcb5811535751dddae1
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/500cec575731fd8575569dcb5811535751dddae1
3
reference_url https://github.com/moodle/moodle/commit/647b9dc06409211018c9f28581504d096ce9e3a8
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/647b9dc06409211018c9f28581504d096ce9e3a8
4
reference_url https://github.com/moodle/moodle/commit/6c0645ca29b195b5caaffc27d80f2ff715c33a48
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/6c0645ca29b195b5caaffc27d80f2ff715c33a48
5
reference_url https://github.com/moodle/moodle/commit/a10506b8d70609478fef156d489e0c7d727b6098
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a10506b8d70609478fef156d489e0c7d727b6098
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
8
reference_url https://moodle.org/mod/forum/discuss.php?d=459498
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/
url https://moodle.org/mod/forum/discuss.php?d=459498
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38273
reference_id CVE-2024-38273
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38273
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
11
reference_url https://github.com/advisories/GHSA-x29x-qwvx-fxr2
reference_id GHSA-x29x-qwvx-fxr2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x29x-qwvx-fxr2
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-20T18:54:37Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
1
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
2
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38273, GHSA-x29x-qwvx-fxr2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3nu2-1cwj-sfdd
6
url VCID-3nvq-s7y5-fufr
vulnerability_id VCID-3nvq-s7y5-fufr
summary 
Moodle reflected XSS via H5P error message
A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43439
reference_id
reference_type
scores
0
value 0.0129
scoring_system epss
scoring_elements 0.80023
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43439
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304268
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:50:51Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304268
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/c7d9026715a107ee16b9f9b2134ed4e6f667af99
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c7d9026715a107ee16b9f9b2134ed4e6f667af99
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461209
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:50:51Z/
url https://moodle.org/mod/forum/discuss.php?d=461209
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43439
reference_id CVE-2024-43439
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43439
6
reference_url https://github.com/advisories/GHSA-hjgc-jxjc-8v9j
reference_id GHSA-hjgc-jxjc-8v9j
reference_type
scores
url https://github.com/advisories/GHSA-hjgc-jxjc-8v9j
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43439, GHSA-hjgc-jxjc-8v9j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3nvq-s7y5-fufr
7
url VCID-4c9d-jf9g-u3gn
vulnerability_id VCID-4c9d-jf9g-u3gn
summary 
Moodle Improper Access Control vulnerability
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they does not have the capability to manage.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-66730
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-19T18:16:10Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-66730
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5549
reference_id
reference_type
scores
0
value 0.00256
scoring_system epss
scoring_elements 0.49228
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5549
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243451
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-19T18:16:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243451
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/5a765e124c950b1e4313c9bf96ea2dd194f65c75
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/5a765e124c950b1e4313c9bf96ea2dd194f65c75
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451590
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-19T18:16:10Z/
url https://moodle.org/mod/forum/discuss.php?d=451590
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5549
reference_id CVE-2023-5549
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5549
7
reference_url https://github.com/advisories/GHSA-fm5h-58g2-4m3f
reference_id GHSA-fm5h-58g2-4m3f
reference_type
scores
url https://github.com/advisories/GHSA-fm5h-58g2-4m3f
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5549, GHSA-fm5h-58g2-4m3f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4c9d-jf9g-u3gn
8
url VCID-4svp-grnb-2fh3
vulnerability_id VCID-4svp-grnb-2fh3
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78971
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:14:29Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78971
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5546
reference_id
reference_type
scores
0
value 0.02379
scoring_system epss
scoring_elements 0.85301
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5546
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243445
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:14:29Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243445
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/aa8ab48521fe4a57c3ec923e6e82a5ac1202e9de
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/aa8ab48521fe4a57c3ec923e6e82a5ac1202e9de
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451587
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:14:29Z/
url https://moodle.org/mod/forum/discuss.php?d=451587
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5546
reference_id CVE-2023-5546
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5546
7
reference_url https://github.com/advisories/GHSA-9724-h8p7-r3jv
reference_id GHSA-9724-h8p7-r3jv
reference_type
scores
url https://github.com/advisories/GHSA-9724-h8p7-r3jv
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5546, GHSA-9724-h8p7-r3jv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4svp-grnb-2fh3
9
url VCID-5ba5-pee7-6kh1
vulnerability_id VCID-5ba5-pee7-6kh1
summary 
Moodle stored Cross-site Scripting (XSS)
Additional sanitizing was required when opening the equation editor to prevent a stored Cross-site Scripting (XSS) risk when editing another user's equation.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81352
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81352
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-33997
reference_id
reference_type
scores
0
value 0.00997
scoring_system epss
scoring_elements 0.77333
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-33997
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/25b1b643c873f6d83ae61903012896b2811fa3bb
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/25b1b643c873f6d83ae61903012896b2811fa3bb
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458385
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T16:36:59Z/
url https://moodle.org/mod/forum/discuss.php?d=458385
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-33997
reference_id CVE-2024-33997
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-33997
6
reference_url https://github.com/advisories/GHSA-9qgq-93c7-9hm4
reference_id GHSA-9qgq-93c7-9hm4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9qgq-93c7-9hm4
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-33997, GHSA-9qgq-93c7-9hm4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ba5-pee7-6kh1
10
url VCID-5s33-v19s-sqd6
vulnerability_id VCID-5s33-v19s-sqd6
summary 
Moodle Cross-site Scripting (XSS)
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81062
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81062
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34000
reference_id
reference_type
scores
0
value 0.0028
scoring_system epss
scoring_elements 0.51641
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34000
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/4c966677de06bff56d46d55c419049f78e70f017
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/4c966677de06bff56d46d55c419049f78e70f017
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458388
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-07T16:24:48Z/
url https://moodle.org/mod/forum/discuss.php?d=458388
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34000
reference_id CVE-2024-34000
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34000
6
reference_url https://github.com/advisories/GHSA-8qwh-4vwv-7c5m
reference_id GHSA-8qwh-4vwv-7c5m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8qwh-4vwv-7c5m
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34000, GHSA-8qwh-4vwv-7c5m
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5s33-v19s-sqd6
11
url VCID-657g-68tv-dkam
vulnerability_id VCID-657g-68tv-dkam
summary 
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
A Denial of Service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26047
reference_id
reference_type
scores
0
value 0.00094
scoring_system epss
scoring_elements 0.262
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26047
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440905
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2440905
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/8683b4a04939332e353cad1be51222930dc40b2c
4
reference_url https://moodle.org/mod/forum/discuss.php?d=473316
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=473316
5
reference_url https://access.redhat.com/security/cve/CVE-2026-26047
reference_id CVE-2026-26047
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-23T19:29:50Z/
url https://access.redhat.com/security/cve/CVE-2026-26047
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26047
reference_id CVE-2026-26047
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26047
7
reference_url https://github.com/advisories/GHSA-cg8j-5cr2-568q
reference_id GHSA-cg8j-5cr2-568q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cg8j-5cr2-568q
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.9
purl pkg:composer/moodle/moodle@4.5.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9
1
url pkg:composer/moodle/moodle@5.0.5
purl pkg:composer/moodle/moodle@5.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5
2
url pkg:composer/moodle/moodle@5.1.2
purl pkg:composer/moodle/moodle@5.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2
aliases CVE-2026-26047, GHSA-cg8j-5cr2-568q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-657g-68tv-dkam
12
url VCID-6726-ca8y-4uez
vulnerability_id VCID-6726-ca8y-4uez
summary 
Improper Access Control in moodle
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25981
reference_id
reference_type
scores
0
value 0.00271
scoring_system epss
scoring_elements 0.50828
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25981
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264097
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264097
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/1c059cb3fe39da46959e912dc671844dd204e83b
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/1c059cb3fe39da46959e912dc671844dd204e83b
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455637
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url https://moodle.org/mod/forum/discuss.php?d=455637
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25981
reference_id CVE-2024-25981
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25981
8
reference_url https://github.com/advisories/GHSA-jfrg-9hpq-9hvp
reference_id GHSA-jfrg-9hpq-9hvp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jfrg-9hpq-9hvp
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T16:54:36Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
1
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25981, GHSA-jfrg-9hpq-9hvp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6726-ca8y-4uez
13
url VCID-6p1s-2r14-z7ax
vulnerability_id VCID-6p1s-2r14-z7ax
summary 
Moodle admin presets export tool includes some secrets that should not be exported
A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43427
reference_id
reference_type
scores
0
value 0.00632
scoring_system epss
scoring_elements 0.70757
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43427
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304255
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:02:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304255
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461195
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:02:44Z/
url https://moodle.org/mod/forum/discuss.php?d=461195
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43427
reference_id CVE-2024-43427
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43427
6
reference_url https://github.com/advisories/GHSA-vpq5-56jj-vf2m
reference_id GHSA-vpq5-56jj-vf2m
reference_type
scores
url https://github.com/advisories/GHSA-vpq5-56jj-vf2m
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43427, GHSA-vpq5-56jj-vf2m
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6p1s-2r14-z7ax
14
url VCID-7p54-yn8k-aydw
vulnerability_id VCID-7p54-yn8k-aydw
summary 
Moodle Remote Code Execution vulnerability
A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82576
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82576
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43425
reference_id
reference_type
scores
0
value 0.88917
scoring_system epss
scoring_elements 0.99541
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43425
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304253
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:20Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304253
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461193
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:20Z/
url https://moodle.org/mod/forum/discuss.php?d=461193
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52350.py
reference_id CVE-2024-43425
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52350.py
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43425
reference_id CVE-2024-43425
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43425
7
reference_url https://github.com/advisories/GHSA-v6f4-v8h8-3c87
reference_id GHSA-v6f4-v8h8-3c87
reference_type
scores
url https://github.com/advisories/GHSA-v6f4-v8h8-3c87
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43425, GHSA-v6f4-v8h8-3c87
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7p54-yn8k-aydw
15
url VCID-7rqc-eepq-43ds
vulnerability_id VCID-7rqc-eepq-43ds
summary 
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79409
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-04-22T20:12:01Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79409
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5540
reference_id
reference_type
scores
0
value 0.022
scoring_system epss
scoring_elements 0.84752
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5540
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243432
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-04-22T20:12:01Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243432
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/3400ae6510b11202aa9d86f7e75b3dff10d81522
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/3400ae6510b11202aa9d86f7e75b3dff10d81522
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451581
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-04-22T20:12:01Z/
url https://moodle.org/mod/forum/discuss.php?d=451581
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5540
reference_id CVE-2023-5540
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5540
7
reference_url https://github.com/advisories/GHSA-w8x2-w4qr-v3x4
reference_id GHSA-w8x2-w4qr-v3x4
reference_type
scores
url https://github.com/advisories/GHSA-w8x2-w4qr-v3x4
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5540, GHSA-w8x2-w4qr-v3x4
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rqc-eepq-43ds
16
url VCID-7trf-g8dq-tua1
vulnerability_id VCID-7trf-g8dq-tua1
summary 
Moodle has a time restriction bypass
An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62401
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.12997
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62401
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404434
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404434
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/78a3fe6c618676dfc53ea538abbfe35e60674eeb
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470390
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470390
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62401
reference_id CVE-2025-62401
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:38:17Z/
url https://access.redhat.com/security/cve/CVE-2025-62401
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62401
reference_id CVE-2025-62401
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62401
7
reference_url https://github.com/advisories/GHSA-w29j-8phw-ffjf
reference_id GHSA-w29j-8phw-ffjf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w29j-8phw-ffjf
fixed_packages
0
url pkg:composer/moodle/moodle@4.4.11
purl pkg:composer/moodle/moodle@4.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11
1
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
2
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62401, GHSA-w29j-8phw-ffjf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7trf-g8dq-tua1
17
url VCID-7x6e-qege-ufdv
vulnerability_id VCID-7x6e-qege-ufdv
summary 
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-04T13:23:28Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5551
reference_id
reference_type
scores
0
value 0.00073
scoring_system epss
scoring_elements 0.22264
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5551
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243453
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-04T13:23:28Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243453
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/2bb6c551cf2e7be29857db35388911b8179394b0
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/2bb6c551cf2e7be29857db35388911b8179394b0
5
reference_url https://github.com/moodle/moodle/commit/6de45d2c9f7dd7b24210ab0310c296366a82986a
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/6de45d2c9f7dd7b24210ab0310c296366a82986a
6
reference_url https://github.com/moodle/moodle/commit/b91feb0b2328cdda2561d68b8dfe2a129190bc85
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/b91feb0b2328cdda2561d68b8dfe2a129190bc85
7
reference_url https://moodle.org/mod/forum/discuss.php?d=451592
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-04T13:23:28Z/
url https://moodle.org/mod/forum/discuss.php?d=451592
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5551
reference_id CVE-2023-5551
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5551
9
reference_url https://github.com/advisories/GHSA-jr83-8x65-xcr5
reference_id GHSA-jr83-8x65-xcr5
reference_type
scores
url https://github.com/advisories/GHSA-jr83-8x65-xcr5
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5551, GHSA-jr83-8x65-xcr5
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7x6e-qege-ufdv
18
url VCID-893t-9cja-43g2
vulnerability_id VCID-893t-9cja-43g2
summary 
Moodle Unsanitized HTML in site log for config_log_created
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80585
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80585
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34006
reference_id
reference_type
scores
0
value 0.00424
scoring_system epss
scoring_elements 0.62548
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34006
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/cd85e090f3feb06e6eff65d1499a67353d82d3cb
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/cd85e090f3feb06e6eff65d1499a67353d82d3cb
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458395
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T15:10:13Z/
url https://moodle.org/mod/forum/discuss.php?d=458395
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34006
reference_id CVE-2024-34006
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34006
6
reference_url https://github.com/advisories/GHSA-vvh5-7v3m-j3mj
reference_id GHSA-vvh5-7v3m-j3mj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vvh5-7v3m-j3mj
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34006, GHSA-vvh5-7v3m-j3mj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-893t-9cja-43g2
19
url VCID-8d9n-ejbb-7fa1
vulnerability_id VCID-8d9n-ejbb-7fa1
summary 
Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77846
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77846
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5548
reference_id
reference_type
scores
0
value 0.00277
scoring_system epss
scoring_elements 0.51421
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5548
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243449
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=2243449
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/7679452caff6faa33f00d3f0589c5190bc01a933
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/7679452caff6faa33f00d3f0589c5190bc01a933
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451589
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=451589
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5548
reference_id CVE-2023-5548
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5548
7
reference_url https://github.com/advisories/GHSA-cwh2-q44x-5w3c
reference_id GHSA-cwh2-q44x-5w3c
reference_type
scores
url https://github.com/advisories/GHSA-cwh2-q44x-5w3c
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5548, GHSA-cwh2-q44x-5w3c
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8d9n-ejbb-7fa1
20
url VCID-9rqr-xzr8-5fgf
vulnerability_id VCID-9rqr-xzr8-5fgf
summary 
Moodle allows users to retrieve information they did not have permission to access
A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45689
reference_id
reference_type
scores
0
value 0.00126
scoring_system epss
scoring_elements 0.31459
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45689
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2309941
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T19:17:47Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2309941
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bb466df202a4b4a692006298f93cbba20566949c
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=461894#p1854491
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45689
reference_id CVE-2024-45689
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45689
6
reference_url https://github.com/advisories/GHSA-j822-x5gg-5r56
reference_id GHSA-j822-x5gg-5r56
reference_type
scores
url https://github.com/advisories/GHSA-j822-x5gg-5r56
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.10
purl pkg:composer/moodle/moodle@4.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-9xk9-qb9x-jfcs
4
vulnerability VCID-j3ts-5ghc-4qct
5
vulnerability VCID-m2a7-q28u-1yfw
6
vulnerability VCID-mnx8-118d-efcr
7
vulnerability VCID-t8vm-tfnq-5kak
8
vulnerability VCID-ykj6-ptd4-7qfs
9
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10
1
url pkg:composer/moodle/moodle@4.3.7
purl pkg:composer/moodle/moodle@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-9xk9-qb9x-jfcs
10
vulnerability VCID-a1ek-x154-5ydy
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-ffp4-23na-rkgr
13
vulnerability VCID-gwnb-e3gt-kqcb
14
vulnerability VCID-gzdw-424p-mqfa
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-nctp-rev5-puej
19
vulnerability VCID-pd2f-4kxt-bkgp
20
vulnerability VCID-rcr9-z41f-sqbr
21
vulnerability VCID-sgdq-5ha7-nfh2
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-ueyy-v42v-7ydh
24
vulnerability VCID-vve8-f9s9-v7ft
25
vulnerability VCID-wwx4-ns21-k3hd
26
vulnerability VCID-wytb-bryq-yqb4
27
vulnerability VCID-xqha-pgc4-3udb
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z5u9-5522-h7fx
30
vulnerability VCID-z693-m8fg-63cc
31
vulnerability VCID-zjqu-hbpf-9qe1
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7
2
url pkg:composer/moodle/moodle@4.4.3
purl pkg:composer/moodle/moodle@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dr5e-6s1a-6uas
18
vulnerability VCID-f1da-1duc-2uhb
19
vulnerability VCID-ffp4-23na-rkgr
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-hufb-p6pa-63c9
23
vulnerability VCID-j3ts-5ghc-4qct
24
vulnerability VCID-kwhy-pkt9-1kfe
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-nctp-rev5-puej
28
vulnerability VCID-pd2f-4kxt-bkgp
29
vulnerability VCID-sgdq-5ha7-nfh2
30
vulnerability VCID-t8vm-tfnq-5kak
31
vulnerability VCID-ueyy-v42v-7ydh
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-xqha-pgc4-3udb
37
vulnerability VCID-yby1-g45r-rugg
38
vulnerability VCID-ykj6-ptd4-7qfs
39
vulnerability VCID-z5u9-5522-h7fx
40
vulnerability VCID-z693-m8fg-63cc
41
vulnerability VCID-zjqu-hbpf-9qe1
42
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3
aliases CVE-2024-45689, GHSA-j822-x5gg-5r56
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9rqr-xzr8-5fgf
21
url VCID-9xk9-qb9x-jfcs
vulnerability_id VCID-9xk9-qb9x-jfcs
summary 
Moodle leaks user names
A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48896
reference_id
reference_type
scores
0
value 0.0031
scoring_system epss
scoring_elements 0.54503
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48896
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318822
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:57:51Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318822
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48896
reference_id CVE-2024-48896
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48896
4
reference_url https://github.com/advisories/GHSA-cq5f-wv7p-5gfc
reference_id GHSA-cq5f-wv7p-5gfc
reference_type
scores
url https://github.com/advisories/GHSA-cq5f-wv7p-5gfc
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
1
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
2
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48896, GHSA-cq5f-wv7p-5gfc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9xk9-qb9x-jfcs
22
url VCID-ajrr-8392-kkcw
vulnerability_id VCID-ajrr-8392-kkcw
summary 
Moodle CSRF risks due to misuse of confirm_sesskey
Incorrect CSRF token checks resulted in multiple CSRF risks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38276
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50527
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38276
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/093aedf79889114d004495f05969168b646b0285
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/093aedf79889114d004495f05969168b646b0285
3
reference_url https://github.com/moodle/moodle/commit/137d311fd1354c679b974633512a771e6e0559a1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/137d311fd1354c679b974633512a771e6e0559a1
4
reference_url https://github.com/moodle/moodle/commit/30fadc3686fa7490860a0bd87a29636139dfb371
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/30fadc3686fa7490860a0bd87a29636139dfb371
5
reference_url https://github.com/moodle/moodle/commit/31ced0851189a6879e4cd27c7e65d21dd9d6e87e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/31ced0851189a6879e4cd27c7e65d21dd9d6e87e
6
reference_url https://github.com/moodle/moodle/commit/57f20b6cb352893871c3afdfa8a4c09a96e16764
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/57f20b6cb352893871c3afdfa8a4c09a96e16764
7
reference_url https://github.com/moodle/moodle/commit/756090ed79aa056d0b5f58e7a1dff67f139f76b4
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/756090ed79aa056d0b5f58e7a1dff67f139f76b4
8
reference_url https://github.com/moodle/moodle/commit/9af9711c0a78ebad87d49bcb369ff813bc57d0a7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/9af9711c0a78ebad87d49bcb369ff813bc57d0a7
9
reference_url https://github.com/moodle/moodle/commit/a0d8c025f732d5c18a2b9d1a8e5cbee35dce86f4
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a0d8c025f732d5c18a2b9d1a8e5cbee35dce86f4
10
reference_url https://github.com/moodle/moodle/commit/c18b59808cefe7b54c85dce6bf2cc71601080667
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c18b59808cefe7b54c85dce6bf2cc71601080667
11
reference_url https://github.com/moodle/moodle/commit/c1aacb3e2884ea4dcc221c5ef2e449ce345f78ae
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c1aacb3e2884ea4dcc221c5ef2e449ce345f78ae
12
reference_url https://github.com/moodle/moodle/commit/c5b1604e8136db6d72057dd8052955058489206c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c5b1604e8136db6d72057dd8052955058489206c
13
reference_url https://github.com/moodle/moodle/commit/da8e8cee6ffaf7c184eded97e1016f20c9de0561
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/da8e8cee6ffaf7c184eded97e1016f20c9de0561
14
reference_url https://github.com/moodle/moodle/commit/dc84fcfab06a4a0fe37797b8422e9fe3a1031c3e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/dc84fcfab06a4a0fe37797b8422e9fe3a1031c3e
15
reference_url https://github.com/moodle/moodle/commit/e1dab5f38166a2ff62983178f7bf8f0ed3a61090
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e1dab5f38166a2ff62983178f7bf8f0ed3a61090
16
reference_url https://github.com/moodle/moodle/commit/e23f603c41055ab92f9b430cf0e7a54b4e120f95
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e23f603c41055ab92f9b430cf0e7a54b4e120f95
17
reference_url https://github.com/moodle/moodle/commit/f2807dee5bc777d9c58b7a70cba6e4c21ee02ea1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/f2807dee5bc777d9c58b7a70cba6e4c21ee02ea1
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
20
reference_url https://moodle.org/mod/forum/discuss.php?d=459501
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/
url https://moodle.org/mod/forum/discuss.php?d=459501
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38276
reference_id CVE-2024-38276
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38276
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
23
reference_url https://github.com/advisories/GHSA-356g-7x36-7m34
reference_id GHSA-356g-7x36-7m34
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-356g-7x36-7m34
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-25T17:33:38Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
1
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
2
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38276, GHSA-356g-7x36-7m34
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ajrr-8392-kkcw
23
url VCID-b3vw-8hzh-dybx
vulnerability_id VCID-b3vw-8hzh-dybx
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34005
reference_id
reference_type
scores
0
value 0.00445
scoring_system epss
scoring_elements 0.6377
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34005
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/ffa045e09912349ed08d6591ec84cb83e57235cc
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ffa045e09912349ed08d6591ec84cb83e57235cc
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458394
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T19:36:05Z/
url https://moodle.org/mod/forum/discuss.php?d=458394
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34005
reference_id CVE-2024-34005
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34005
5
reference_url https://github.com/advisories/GHSA-r99q-hmqv-xw8w
reference_id GHSA-r99q-hmqv-xw8w
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r99q-hmqv-xw8w
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34005, GHSA-r99q-hmqv-xw8w
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b3vw-8hzh-dybx
24
url VCID-d92c-j4yy-fud3
vulnerability_id VCID-d92c-j4yy-fud3
summary 
Moodle authorization headers preserved between "emulated redirects"
A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82136
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43432
reference_id
reference_type
scores
0
value 0.00336
scoring_system epss
scoring_elements 0.56755
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43432
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304260
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:06:57Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304260
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461200
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T15:06:57Z/
url https://moodle.org/mod/forum/discuss.php?d=461200
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43432
reference_id CVE-2024-43432
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43432
6
reference_url https://github.com/advisories/GHSA-7wmp-2xmx-g6h8
reference_id GHSA-7wmp-2xmx-g6h8
reference_type
scores
url https://github.com/advisories/GHSA-7wmp-2xmx-g6h8
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43432, GHSA-7wmp-2xmx-g6h8
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d92c-j4yy-fud3
25
url VCID-dp61-6ban-cyda
vulnerability_id VCID-dp61-6ban-cyda
summary 
Cross-site Scripting in Moodle Chat
The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's Using_Chat page says "If you know some HTML code, you can use it in your text to do things like insert images, play sounds or create different coloured and sized text." This page also says "Chat is due to be removed from standard Moodle."
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-28593
reference_id
reference_type
scores
0
value 0.00142
scoring_system epss
scoring_elements 0.34174
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-28593
1
reference_url https://docs.moodle.org/403/en/Using_Chat
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-25T16:47:10Z/
url https://docs.moodle.org/403/en/Using_Chat
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-25T16:47:10Z/
url https://medium.com/%40lamscun/how-do-i-change-htmli-from-low-to-critical-your-email-box-is-safe-e7171efd88fe
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-28593
reference_id CVE-2024-28593
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-28593
5
reference_url https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt
reference_id CVE-2024-28593.TXT
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-25T16:47:10Z/
url https://gist.githubusercontent.com/minendie/4f23174687bc4d8eb7f727d9959b5399/raw/9ce573cebcce5521d9d6f826ab68f3780036b874/CVE-2024-28593.txt
6
reference_url https://github.com/advisories/GHSA-f6mh-79vh-2hv7
reference_id GHSA-f6mh-79vh-2hv7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f6mh-79vh-2hv7
fixed_packages
aliases CVE-2024-28593, GHSA-f6mh-79vh-2hv7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dp61-6ban-cyda
26
url VCID-evef-t6cx-vqcc
vulnerability_id VCID-evef-t6cx-vqcc
summary 
Moodle broken access control when setting calendar event type
Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81247
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81247
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-33996
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38823
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-33996
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458384#p1840909
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-01T13:14:42Z/
url https://moodle.org/mod/forum/discuss.php?d=458384#p1840909
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-33996
reference_id CVE-2024-33996
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-33996
5
reference_url https://github.com/advisories/GHSA-4qww-rxq6-x7gf
reference_id GHSA-4qww-rxq6-x7gf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4qww-rxq6-x7gf
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-33996, GHSA-4qww-rxq6-x7gf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-evef-t6cx-vqcc
27
url VCID-g3km-hbas-x3cg
vulnerability_id VCID-g3km-hbas-x3cg
summary 
Moodle has arbitrary file read risk through pdfTeX
A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43426
reference_id
reference_type
scores
0
value 0.00911
scoring_system epss
scoring_elements 0.76223
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43426
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304254
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:41:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304254
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-82745
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461194
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:41:10Z/
url https://moodle.org/mod/forum/discuss.php?d=461194
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43426
reference_id CVE-2024-43426
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43426
6
reference_url https://github.com/advisories/GHSA-vjmm-r9gg-425m
reference_id GHSA-vjmm-r9gg-425m
reference_type
scores
url https://github.com/advisories/GHSA-vjmm-r9gg-425m
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43426, GHSA-vjmm-r9gg-425m
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g3km-hbas-x3cg
28
url VCID-gycn-bey2-4yam
vulnerability_id VCID-gycn-bey2-4yam
summary 
Improper Access Control in moodle
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80501
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80501
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25980
reference_id
reference_type
scores
0
value 0.00167
scoring_system epss
scoring_elements 0.3759
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25980
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264096
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264096
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/662192fcecdefdaae79f55db96bd64dbcdeef85b
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/662192fcecdefdaae79f55db96bd64dbcdeef85b
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455636
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url https://moodle.org/mod/forum/discuss.php?d=455636
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25980
reference_id CVE-2024-25980
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25980
8
reference_url https://github.com/advisories/GHSA-cp8m-h777-g4p3
reference_id GHSA-cp8m-h777-g4p3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cp8m-h777-g4p3
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:42:10Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
1
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25980, GHSA-cp8m-h777-g4p3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gycn-bey2-4yam
29
url VCID-hmuw-bjax-37bz
vulnerability_id VCID-hmuw-bjax-37bz
summary 
Moodle Cross-site Scripting (XSS)
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81354
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81354
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-33998
reference_id
reference_type
scores
0
value 0.01399
scoring_system epss
scoring_elements 0.80777
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-33998
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/66da9394993d97861f6c80bc4ec4ee9b513d2f33
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/66da9394993d97861f6c80bc4ec4ee9b513d2f33
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458386
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T14:26:53Z/
url https://moodle.org/mod/forum/discuss.php?d=458386
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-33998
reference_id CVE-2024-33998
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-33998
6
reference_url https://github.com/advisories/GHSA-xqhh-253w-4q5f
reference_id GHSA-xqhh-253w-4q5f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xqhh-253w-4q5f
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-33998, GHSA-xqhh-253w-4q5f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hmuw-bjax-37bz
30
url VCID-hsk6-h5ky-g3cx
vulnerability_id VCID-hsk6-h5ky-g3cx
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The course upload preview contained an XSS risk for users uploading unsafe data.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79455
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-04T13:25:11Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79455
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5547
reference_id
reference_type
scores
0
value 0.00139
scoring_system epss
scoring_elements 0.33773
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5547
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243447
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-04T13:25:11Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243447
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/833e818f022cce8373922afaa0cc6c8726b6b079
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/833e818f022cce8373922afaa0cc6c8726b6b079
5
reference_url https://github.com/moodle/moodle/commit/ef67f43c67e00c271658e42fc2e9cbe5fc94a87e
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ef67f43c67e00c271658e42fc2e9cbe5fc94a87e
6
reference_url https://moodle.org/mod/forum/discuss.php?d=451588
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-04T13:25:11Z/
url https://moodle.org/mod/forum/discuss.php?d=451588
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5547
reference_id CVE-2023-5547
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5547
8
reference_url https://github.com/advisories/GHSA-9gqp-3g28-w9xc
reference_id GHSA-9gqp-3g28-w9xc
reference_type
scores
url https://github.com/advisories/GHSA-9gqp-3g28-w9xc
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5547, GHSA-9gqp-3g28-w9xc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hsk6-h5ky-g3cx
31
url VCID-j3ts-5ghc-4qct
vulnerability_id VCID-j3ts-5ghc-4qct
summary 
Moodle has a Remote Code Execution risk via file restore
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26045
reference_id
reference_type
scores
0
value 0.00113
scoring_system epss
scoring_elements 0.29587
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26045
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440901
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2440901
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/566054ba11f609a6d48d09b32e85d435d49927da
4
reference_url https://moodle.org/mod/forum/discuss.php?d=473314
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=473314
5
reference_url https://access.redhat.com/security/cve/CVE-2026-26045
reference_id CVE-2026-26045
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-02-24T04:56:33Z/
url https://access.redhat.com/security/cve/CVE-2026-26045
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26045
reference_id CVE-2026-26045
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26045
7
reference_url https://github.com/advisories/GHSA-ggxq-2mg9-8966
reference_id GHSA-ggxq-2mg9-8966
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ggxq-2mg9-8966
fixed_packages
0
url pkg:composer/moodle/moodle@4.5.9
purl pkg:composer/moodle/moodle@4.5.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.9
1
url pkg:composer/moodle/moodle@5.0.5
purl pkg:composer/moodle/moodle@5.0.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.5
2
url pkg:composer/moodle/moodle@5.1.2
purl pkg:composer/moodle/moodle@5.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.2
aliases CVE-2026-26045, GHSA-ggxq-2mg9-8966
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j3ts-5ghc-4qct
32
url VCID-jfsu-ya7r-h3e1
vulnerability_id VCID-jfsu-ya7r-h3e1
summary 
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79408
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-03T18:23:49Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79408
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5539
reference_id
reference_type
scores
0
value 0.022
scoring_system epss
scoring_elements 0.84752
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5539
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243352
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-03T18:23:49Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243352
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/ba974a4add981743b5a37c5bcc4714c62f6052ce
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ba974a4add981743b5a37c5bcc4714c62f6052ce
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451580
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-03T18:23:49Z/
url https://moodle.org/mod/forum/discuss.php?d=451580
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5539
reference_id CVE-2023-5539
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5539
7
reference_url https://github.com/advisories/GHSA-3xxm-3g3c-w579
reference_id GHSA-3xxm-3g3c-w579
reference_type
scores
url https://github.com/advisories/GHSA-3xxm-3g3c-w579
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5539, GHSA-3xxm-3g3c-w579
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jfsu-ya7r-h3e1
33
url VCID-jkyc-esnt-p3ay
vulnerability_id VCID-jkyc-esnt-p3ay
summary 
Moodle CSRF risk in analytics management of models
Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81059
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81059
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34008
reference_id
reference_type
scores
0
value 0.00361
scoring_system epss
scoring_elements 0.58549
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34008
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/498a766263743ee649f6874e440a94517a077e2e
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/498a766263743ee649f6874e440a94517a077e2e
4
reference_url https://moodle.org/mod/forum/discuss.php?d=458397
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-05T19:22:27Z/
url https://moodle.org/mod/forum/discuss.php?d=458397
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34008
reference_id CVE-2024-34008
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34008
6
reference_url https://github.com/advisories/GHSA-68x5-4jg5-gjgg
reference_id GHSA-68x5-4jg5-gjgg
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-68x5-4jg5-gjgg
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34008, GHSA-68x5-4jg5-gjgg
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jkyc-esnt-p3ay
34
url VCID-m2a7-q28u-1yfw
vulnerability_id VCID-m2a7-q28u-1yfw
summary 
Moodle vulnerable to brute-force password guesses
Moodle's mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62399
reference_id
reference_type
scores
0
value 0.00088
scoring_system epss
scoring_elements 0.25243
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62399
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2404432
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2404432
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/e4d02567c922c537086de9f59f063ca073552a3a
4
reference_url https://moodle.org/mod/forum/discuss.php?d=470388
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=470388
5
reference_url https://access.redhat.com/security/cve/CVE-2025-62399
reference_id CVE-2025-62399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-23T14:51:39Z/
url https://access.redhat.com/security/cve/CVE-2025-62399
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62399
reference_id CVE-2025-62399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62399
7
reference_url https://github.com/advisories/GHSA-m58f-9pvv-8mp2
reference_id GHSA-m58f-9pvv-8mp2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m58f-9pvv-8mp2
fixed_packages
0
url pkg:composer/moodle/moodle@4.4.11
purl pkg:composer/moodle/moodle@4.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.11
1
url pkg:composer/moodle/moodle@4.5.7
purl pkg:composer/moodle/moodle@4.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.7
2
url pkg:composer/moodle/moodle@5.0.3
purl pkg:composer/moodle/moodle@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-44zf-1dw7-qkf5
1
vulnerability VCID-4zvp-nmrk-4qbq
2
vulnerability VCID-5snb-dyv3-efe9
3
vulnerability VCID-5xhb-mx3v-fuhs
4
vulnerability VCID-61ry-zz34-8qhj
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-f1da-1duc-2uhb
7
vulnerability VCID-hufb-p6pa-63c9
8
vulnerability VCID-j3ts-5ghc-4qct
9
vulnerability VCID-wby4-h9ud-1yh5
10
vulnerability VCID-yby1-g45r-rugg
11
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.3
aliases CVE-2025-62399, GHSA-m58f-9pvv-8mp2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m2a7-q28u-1yfw
35
url VCID-m3jj-r66a-d7cv
vulnerability_id VCID-m3jj-r66a-d7cv
summary 
Moodle vulnerable to cache poisoning via injection into storage
To address a cache poisoning risk in Moodle, additional validation for local storage was required.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81718
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81718
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43428
reference_id
reference_type
scores
0
value 0.00058
scoring_system epss
scoring_elements 0.18476
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43428
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304256
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:01Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304256
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461196
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:41:01Z/
url https://moodle.org/mod/forum/discuss.php?d=461196
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43428
reference_id CVE-2024-43428
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43428
6
reference_url https://github.com/advisories/GHSA-2r9m-wg35-rfvc
reference_id GHSA-2r9m-wg35-rfvc
reference_type
scores
url https://github.com/advisories/GHSA-2r9m-wg35-rfvc
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43428, GHSA-2r9m-wg35-rfvc
risk_score 3.5
exploitability 0.5
weighted_severity 6.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m3jj-r66a-d7cv
36
url VCID-m9tk-fa8m-zbah
vulnerability_id VCID-m9tk-fa8m-zbah
summary 
Moodle LFI vulnerability when restoring malformed block backups
A flaw was found in moodle. A local file may include risks when restoring block backups.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43440
reference_id
reference_type
scores
0
value 0.00334
scoring_system epss
scoring_elements 0.56485
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43440
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304269
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:23:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304269
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461210
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:23:21Z/
url https://moodle.org/mod/forum/discuss.php?d=461210
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43440
reference_id CVE-2024-43440
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43440
5
reference_url https://github.com/advisories/GHSA-qrqv-26gf-xgwh
reference_id GHSA-qrqv-26gf-xgwh
reference_type
scores
url https://github.com/advisories/GHSA-qrqv-26gf-xgwh
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43440, GHSA-qrqv-26gf-xgwh
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m9tk-fa8m-zbah
37
url VCID-mhh7-n7ut-hkh6
vulnerability_id VCID-mhh7-n7ut-hkh6
summary 
Improper Handling of Parameters in moodle
The URL parameters accepted by forum search were not limited to the allowed parameters.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69774
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-69774
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25979
reference_id
reference_type
scores
0
value 0.00163
scoring_system epss
scoring_elements 0.37048
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25979
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264095
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264095
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/6eaeeda6cf759672def05a85afe9e4d521739166
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/6eaeeda6cf759672def05a85afe9e4d521739166
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455635
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url https://moodle.org/mod/forum/discuss.php?d=455635
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25979
reference_id CVE-2024-25979
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25979
8
reference_url https://github.com/advisories/GHSA-6vjf-48fh-vxxj
reference_id GHSA-6vjf-48fh-vxxj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6vjf-48fh-vxxj
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-21T17:42:19Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
1
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25979, GHSA-6vjf-48fh-vxxj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mhh7-n7ut-hkh6
38
url VCID-mnx8-118d-efcr
vulnerability_id VCID-mnx8-118d-efcr
summary 
moodle: IDOR in edit/delete RSS feed
A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48897
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48897
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318821
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:51:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318821
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48897
reference_id CVE-2024-48897
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48897
4
reference_url https://github.com/advisories/GHSA-x3x9-349x-2485
reference_id GHSA-x3x9-349x-2485
reference_type
scores
url https://github.com/advisories/GHSA-x3x9-349x-2485
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
1
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
2
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48897, GHSA-x3x9-349x-2485
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnx8-118d-efcr
39
url VCID-ms4e-v5zc-9kgc
vulnerability_id VCID-ms4e-v5zc-9kgc
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81135
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-81135
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34002
reference_id
reference_type
scores
0
value 0.00445
scoring_system epss
scoring_elements 0.6377
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34002
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458390
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:56:11Z/
url https://moodle.org/mod/forum/discuss.php?d=458390
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34002
reference_id CVE-2024-34002
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34002
5
reference_url https://github.com/advisories/GHSA-mm9p-xwfm-3fqf
reference_id GHSA-mm9p-xwfm-3fqf
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mm9p-xwfm-3fqf
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34002, GHSA-mm9p-xwfm-3fqf
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ms4e-v5zc-9kgc
40
url VCID-ngar-aydn-eye4
vulnerability_id VCID-ngar-aydn-eye4
summary 
Improper Authorization
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T21:03:37Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5543
reference_id
reference_type
scores
0
value 0.00088
scoring_system epss
scoring_elements 0.25187
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5543
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243442
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T21:03:37Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243442
3
reference_url https://moodle.org/mod/forum/discuss.php?d=451584
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T21:03:37Z/
url https://moodle.org/mod/forum/discuss.php?d=451584
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5543
reference_id CVE-2023-5543
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-5543
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
aliases CVE-2023-5543
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ngar-aydn-eye4
41
url VCID-pged-191y-quhm
vulnerability_id VCID-pged-191y-quhm
summary 
Moodle stored XSS via calendar's event title when deleting the event
Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38274
reference_id
reference_type
scores
0
value 0.00994
scoring_system epss
scoring_elements 0.77309
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38274
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
3
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
4
reference_url https://moodle.org/mod/forum/discuss.php?d=459499
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/
url https://moodle.org/mod/forum/discuss.php?d=459499
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38274
reference_id CVE-2024-38274
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38274
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
7
reference_url https://github.com/advisories/GHSA-p5cg-6rfr-6mx8
reference_id GHSA-p5cg-6rfr-6mx8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p5cg-6rfr-6mx8
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-15T18:37:02Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
1
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
2
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38274, GHSA-p5cg-6rfr-6mx8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pged-191y-quhm
42
url VCID-qabh-bpmn-1ye5
vulnerability_id VCID-qabh-bpmn-1ye5
summary 
Cross-Site Request Forgery in moodle
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-54749
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-54749
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25982
reference_id
reference_type
scores
0
value 0.0038
scoring_system epss
scoring_elements 0.59795
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25982
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264098
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264098
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/bac703c534d05d4502580fbe32447d5c777869bf
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/bac703c534d05d4502580fbe32447d5c777869bf
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455638
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url https://moodle.org/mod/forum/discuss.php?d=455638
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25982
reference_id CVE-2024-25982
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25982
8
reference_url https://github.com/advisories/GHSA-7pjp-fm93-p6pj
reference_id GHSA-7pjp-fm93-p6pj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7pjp-fm93-p6pj
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T15:39:38Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
1
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25982, GHSA-7pjp-fm93-p6pj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qabh-bpmn-1ye5
43
url VCID-qruy-fs4p-43h1
vulnerability_id VCID-qruy-fs4p-43h1
summary 
Moodle has CSRF risk in Feedback non-respondents report
The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43434
reference_id
reference_type
scores
0
value 0.00522
scoring_system epss
scoring_elements 0.6729
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43434
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304262
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304262
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461203
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:44Z/
url https://moodle.org/mod/forum/discuss.php?d=461203
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43434
reference_id CVE-2024-43434
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value 8.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43434
5
reference_url https://github.com/advisories/GHSA-x87r-37q5-mmr8
reference_id GHSA-x87r-37q5-mmr8
reference_type
scores
url https://github.com/advisories/GHSA-x87r-37q5-mmr8
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43434, GHSA-x87r-37q5-mmr8
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qruy-fs4p-43h1
44
url VCID-r1ug-e8x6-83gt
vulnerability_id VCID-r1ug-e8x6-83gt
summary 
Uncontrolled Resource Consumption
Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-74641
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-74641
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25978
reference_id
reference_type
scores
0
value 0.00292
scoring_system epss
scoring_elements 0.52921
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25978
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264074
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264074
3
reference_url https://github.com/moodle/moodle/commit/9ba14233597480fb78c04d531050c090de4e60a2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/9ba14233597480fb78c04d531050c090de4e60a2
4
reference_url https://github.com/moodle/moodle/commit/a73e0ac76d77b67602f91bb211962813d60bc573
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/a73e0ac76d77b67602f91bb211962813d60bc573
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455634
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url https://moodle.org/mod/forum/discuss.php?d=455634
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25978
reference_id CVE-2024-25978
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25978
8
reference_url https://github.com/advisories/GHSA-487g-3m3v-hjhq
reference_id GHSA-487g-3m3v-hjhq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-487g-3m3v-hjhq
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T17:09:44Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
1
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25978, GHSA-487g-3m3v-hjhq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r1ug-e8x6-83gt
45
url VCID-r4m3-9prr-dkby
vulnerability_id VCID-r4m3-9prr-dkby
summary 
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43438
reference_id
reference_type
scores
0
value 0.00287
scoring_system epss
scoring_elements 0.5246
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43438
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304267
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:31Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304267
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461208
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:31Z/
url https://moodle.org/mod/forum/discuss.php?d=461208
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43438
reference_id CVE-2024-43438
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43438
5
reference_url https://github.com/advisories/GHSA-p9cx-f595-h79h
reference_id GHSA-p9cx-f595-h79h
reference_type
scores
url https://github.com/advisories/GHSA-p9cx-f595-h79h
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43438, GHSA-p9cx-f595-h79h
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r4m3-9prr-dkby
46
url VCID-r5w9-cbyk-hqc6
vulnerability_id VCID-r5w9-cbyk-hqc6
summary 
Moodle's IDOR in badges allows deletion of arbitrary badges
A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43431
reference_id
reference_type
scores
0
value 0.00308
scoring_system epss
scoring_elements 0.54353
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43431
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304259
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:53Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304259
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461199
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-07T14:40:53Z/
url https://moodle.org/mod/forum/discuss.php?d=461199
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43431
reference_id CVE-2024-43431
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43431
5
reference_url https://github.com/advisories/GHSA-wwjf-gwrv-wh45
reference_id GHSA-wwjf-gwrv-wh45
reference_type
scores
url https://github.com/advisories/GHSA-wwjf-gwrv-wh45
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43431, GHSA-wwjf-gwrv-wh45
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r5w9-cbyk-hqc6
47
url VCID-rm2q-xde7-a3ej
vulnerability_id VCID-rm2q-xde7-a3ej
summary 
Moodle uses the same key for QR login and auto-login
A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38277
reference_id
reference_type
scores
0
value 0.00186
scoring_system epss
scoring_elements 0.40237
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38277
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0caedaab7cd5a46331d56654ce9301b0a5a04c56
3
reference_url https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/1aea4a15281d81f2414a95aa485b8a6551708f57
4
reference_url https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/ad46a97f5355f0451d52e9f1a0f528d9a6f12e06
5
reference_url https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/d05795db8eece2943241a29a5443fb4685ba6070
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
8
reference_url https://moodle.org/mod/forum/discuss.php?d=459502
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/
url https://moodle.org/mod/forum/discuss.php?d=459502
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38277
reference_id CVE-2024-38277
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38277
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
reference_id F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/
11
reference_url https://github.com/advisories/GHSA-r82w-3phg-qvr4
reference_id GHSA-r82w-3phg-qvr4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r82w-3phg-qvr4
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
reference_id GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-21T15:55:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
1
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
2
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38277, GHSA-r82w-3phg-qvr4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rm2q-xde7-a3ej
48
url VCID-s7pu-hgz5-zfbq
vulnerability_id VCID-s7pu-hgz5-zfbq
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79426
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-17T20:18:35Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79426
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5541
reference_id
reference_type
scores
0
value 0.00139
scoring_system epss
scoring_elements 0.33773
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5541
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243437
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-17T20:18:35Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243437
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/f5f6ce375e37da902afb043c6b506129fc433233
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/f5f6ce375e37da902afb043c6b506129fc433233
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451582
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-17T20:18:35Z/
url https://moodle.org/mod/forum/discuss.php?d=451582
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5541
reference_id CVE-2023-5541
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5541
7
reference_url https://github.com/advisories/GHSA-28gc-4qq5-8q26
reference_id GHSA-28gc-4qq5-8q26
reference_type
scores
url https://github.com/advisories/GHSA-28gc-4qq5-8q26
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5541, GHSA-28gc-4qq5-8q26
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s7pu-hgz5-zfbq
49
url VCID-sdxf-f1b3-t3cc
vulnerability_id VCID-sdxf-f1b3-t3cc
summary 
Moodle vulnerable to site administration SQL injection via XMLDB editor
A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43436
reference_id
reference_type
scores
0
value 0.00496
scoring_system epss
scoring_elements 0.6619
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43436
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304264
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:37Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304264
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=461206
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T14:40:37Z/
url https://moodle.org/mod/forum/discuss.php?d=461206
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43436
reference_id CVE-2024-43436
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43436
5
reference_url https://github.com/advisories/GHSA-mx26-62xm-2p83
reference_id GHSA-mx26-62xm-2p83
reference_type
scores
url https://github.com/advisories/GHSA-mx26-62xm-2p83
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43436, GHSA-mx26-62xm-2p83
risk_score 3.2
exploitability 0.5
weighted_severity 6.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sdxf-f1b3-t3cc
50
url VCID-t8vm-tfnq-5kak
vulnerability_id VCID-t8vm-tfnq-5kak
summary 
moodle: IDOR when fetching report schedules
A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48901
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48901
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318817
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:55:25Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318817
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48901
reference_id CVE-2024-48901
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48901
4
reference_url https://github.com/advisories/GHSA-mg54-p2wj-5ph7
reference_id GHSA-mg54-p2wj-5ph7
reference_type
scores
url https://github.com/advisories/GHSA-mg54-p2wj-5ph7
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
1
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
2
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48901, GHSA-mg54-p2wj-5ph7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t8vm-tfnq-5kak
51
url VCID-tgs8-3n7x-cyc1
vulnerability_id VCID-tgs8-3n7x-cyc1
summary 
Moodle HTTP authorization header is preserved between "emulated redirects"
The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-38275
reference_id
reference_type
scores
0
value 0.00546
scoring_system epss
scoring_elements 0.68222
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-38275
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/0df3c5837a592e6663c4d531ff6a1f776bc2f785
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/0df3c5837a592e6663c4d531ff6a1f776bc2f785
3
reference_url https://github.com/moodle/moodle/commit/3e38c84315a7991ce5ef5f241f5e873b5ca24f01
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/3e38c84315a7991ce5ef5f241f5e873b5ca24f01
4
reference_url https://github.com/moodle/moodle/commit/836b2c23a210317d130017d77bb64e3b510869a9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/836b2c23a210317d130017d77bb64e3b510869a9
5
reference_url https://github.com/moodle/moodle/commit/f7988538b2208c55f2c40ce4f0815901dc88049b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/f7988538b2208c55f2c40ce4f0815901dc88049b
6
reference_url https://moodle.org/mod/forum/discuss.php?d=459500
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-02T13:36:09Z/
url https://moodle.org/mod/forum/discuss.php?d=459500
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-38275
reference_id CVE-2024-38275
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-38275
8
reference_url https://github.com/advisories/GHSA-p2cj-86v4-7782
reference_id GHSA-p2cj-86v4-7782
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p2cj-86v4-7782
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.8
purl pkg:composer/moodle/moodle@4.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nvq-s7y5-fufr
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6p1s-2r14-z7ax
7
vulnerability VCID-7p54-yn8k-aydw
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-9rqr-xzr8-5fgf
10
vulnerability VCID-9xk9-qb9x-jfcs
11
vulnerability VCID-d92c-j4yy-fud3
12
vulnerability VCID-g3km-hbas-x3cg
13
vulnerability VCID-j3ts-5ghc-4qct
14
vulnerability VCID-m2a7-q28u-1yfw
15
vulnerability VCID-m3jj-r66a-d7cv
16
vulnerability VCID-m9tk-fa8m-zbah
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-qruy-fs4p-43h1
19
vulnerability VCID-r4m3-9prr-dkby
20
vulnerability VCID-r5w9-cbyk-hqc6
21
vulnerability VCID-sdxf-f1b3-t3cc
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-vsrk-zp7j-w7bk
24
vulnerability VCID-wwny-t2ez-y3e1
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.8
1
url pkg:composer/moodle/moodle@4.3.5
purl pkg:composer/moodle/moodle@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-657g-68tv-dkam
10
vulnerability VCID-6cvg-r9am-wbh5
11
vulnerability VCID-6p1s-2r14-z7ax
12
vulnerability VCID-7p54-yn8k-aydw
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-cjvx-m4xg-p7hb
19
vulnerability VCID-d92c-j4yy-fud3
20
vulnerability VCID-dky9-v96e-pubh
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-g3km-hbas-x3cg
23
vulnerability VCID-gwnb-e3gt-kqcb
24
vulnerability VCID-gzdw-424p-mqfa
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-qruy-fs4p-43h1
33
vulnerability VCID-r4m3-9prr-dkby
34
vulnerability VCID-r5w9-cbyk-hqc6
35
vulnerability VCID-rcr9-z41f-sqbr
36
vulnerability VCID-sdxf-f1b3-t3cc
37
vulnerability VCID-sgdq-5ha7-nfh2
38
vulnerability VCID-t8vm-tfnq-5kak
39
vulnerability VCID-ueyy-v42v-7ydh
40
vulnerability VCID-vsrk-zp7j-w7bk
41
vulnerability VCID-vve8-f9s9-v7ft
42
vulnerability VCID-wwny-t2ez-y3e1
43
vulnerability VCID-wwx4-ns21-k3hd
44
vulnerability VCID-wytb-bryq-yqb4
45
vulnerability VCID-xqha-pgc4-3udb
46
vulnerability VCID-ykj6-ptd4-7qfs
47
vulnerability VCID-z5u9-5522-h7fx
48
vulnerability VCID-z693-m8fg-63cc
49
vulnerability VCID-zjqu-hbpf-9qe1
50
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.5
2
url pkg:composer/moodle/moodle@4.4.1
purl pkg:composer/moodle/moodle@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nvq-s7y5-fufr
8
vulnerability VCID-3yre-ft3n-2fd3
9
vulnerability VCID-44zf-1dw7-qkf5
10
vulnerability VCID-4zvp-nmrk-4qbq
11
vulnerability VCID-5snb-dyv3-efe9
12
vulnerability VCID-5xhb-mx3v-fuhs
13
vulnerability VCID-61ry-zz34-8qhj
14
vulnerability VCID-657g-68tv-dkam
15
vulnerability VCID-6cvg-r9am-wbh5
16
vulnerability VCID-6p1s-2r14-z7ax
17
vulnerability VCID-7p54-yn8k-aydw
18
vulnerability VCID-7trf-g8dq-tua1
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-cjvx-m4xg-p7hb
24
vulnerability VCID-d92c-j4yy-fud3
25
vulnerability VCID-dky9-v96e-pubh
26
vulnerability VCID-dr5e-6s1a-6uas
27
vulnerability VCID-edb5-zwa3-mfam
28
vulnerability VCID-f1da-1duc-2uhb
29
vulnerability VCID-ffp4-23na-rkgr
30
vulnerability VCID-g3km-hbas-x3cg
31
vulnerability VCID-gwnb-e3gt-kqcb
32
vulnerability VCID-gzdw-424p-mqfa
33
vulnerability VCID-hufb-p6pa-63c9
34
vulnerability VCID-j3ts-5ghc-4qct
35
vulnerability VCID-jjsw-9p4b-m3e5
36
vulnerability VCID-kwhy-pkt9-1kfe
37
vulnerability VCID-m2a7-q28u-1yfw
38
vulnerability VCID-m3jj-r66a-d7cv
39
vulnerability VCID-m9tk-fa8m-zbah
40
vulnerability VCID-mnx8-118d-efcr
41
vulnerability VCID-nctp-rev5-puej
42
vulnerability VCID-pd2f-4kxt-bkgp
43
vulnerability VCID-qruy-fs4p-43h1
44
vulnerability VCID-r4m3-9prr-dkby
45
vulnerability VCID-r5w9-cbyk-hqc6
46
vulnerability VCID-sdxf-f1b3-t3cc
47
vulnerability VCID-sgdq-5ha7-nfh2
48
vulnerability VCID-t8vm-tfnq-5kak
49
vulnerability VCID-ueyy-v42v-7ydh
50
vulnerability VCID-vsrk-zp7j-w7bk
51
vulnerability VCID-vve8-f9s9-v7ft
52
vulnerability VCID-wby4-h9ud-1yh5
53
vulnerability VCID-wwny-t2ez-y3e1
54
vulnerability VCID-wwx4-ns21-k3hd
55
vulnerability VCID-wytb-bryq-yqb4
56
vulnerability VCID-xqha-pgc4-3udb
57
vulnerability VCID-yby1-g45r-rugg
58
vulnerability VCID-ykj6-ptd4-7qfs
59
vulnerability VCID-z5u9-5522-h7fx
60
vulnerability VCID-z693-m8fg-63cc
61
vulnerability VCID-zjqu-hbpf-9qe1
62
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.1
aliases CVE-2024-38275, GHSA-p2cj-86v4-7782
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tgs8-3n7x-cyc1
52
url VCID-umd1-pmr4-4bgs
vulnerability_id VCID-umd1-pmr4-4bgs
summary 
Moodle CSRF risk in admin preset tool management of presets
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34001
reference_id
reference_type
scores
0
value 0.00323
scoring_system epss
scoring_elements 0.55654
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34001
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://github.com/moodle/moodle/commit/03e93da556201291e4a345d353a06d08d5d04dd6
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/03e93da556201291e4a345d353a06d08d5d04dd6
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458389
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-01T13:12:28Z/
url https://moodle.org/mod/forum/discuss.php?d=458389
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34001
reference_id CVE-2024-34001
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34001
5
reference_url https://github.com/advisories/GHSA-gq9f-8rj4-w7jc
reference_id GHSA-gq9f-8rj4-w7jc
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gq9f-8rj4-w7jc
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34001, GHSA-gq9f-8rj4-w7jc
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-umd1-pmr4-4bgs
53
url VCID-utsj-g57g-cbeb
vulnerability_id VCID-utsj-g57g-cbeb
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79509
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79509
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5544
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.39016
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5544
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243443
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=2243443
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/5fec728be9df3c9fc282cd0897c73ca5cfcfea5f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/5fec728be9df3c9fc282cd0897c73ca5cfcfea5f
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451585
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=451585
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5544
reference_id CVE-2023-5544
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5544
7
reference_url https://github.com/advisories/GHSA-j5xf-gv89-g422
reference_id GHSA-j5xf-gv89-g422
reference_type
scores
url https://github.com/advisories/GHSA-j5xf-gv89-g422
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5544, GHSA-j5xf-gv89-g422
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-utsj-g57g-cbeb
54
url VCID-vsrk-zp7j-w7bk
vulnerability_id VCID-vsrk-zp7j-w7bk
summary 
Moodle IDOR when deleting OAuth2 linked accounts
A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45690
reference_id
reference_type
scores
0
value 0.00393
scoring_system epss
scoring_elements 0.60627
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45690
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2309939
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-27T14:15:47Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2309939
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://github.com/moodle/moodle/commit/809629e5afcd5be087e65668fe6cf67f2f4f5145
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/809629e5afcd5be087e65668fe6cf67f2f4f5145
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461895#p1854492
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=461895#p1854492
5
reference_url https://moodle.org/security
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/security
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45690
reference_id CVE-2024-45690
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45690
7
reference_url https://github.com/advisories/GHSA-fhg2-r2h9-h7q8
reference_id GHSA-fhg2-r2h9-h7q8
reference_type
scores
url https://github.com/advisories/GHSA-fhg2-r2h9-h7q8
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.10
purl pkg:composer/moodle/moodle@4.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-9xk9-qb9x-jfcs
4
vulnerability VCID-j3ts-5ghc-4qct
5
vulnerability VCID-m2a7-q28u-1yfw
6
vulnerability VCID-mnx8-118d-efcr
7
vulnerability VCID-t8vm-tfnq-5kak
8
vulnerability VCID-ykj6-ptd4-7qfs
9
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.10
1
url pkg:composer/moodle/moodle@4.3.7
purl pkg:composer/moodle/moodle@4.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-9xk9-qb9x-jfcs
10
vulnerability VCID-a1ek-x154-5ydy
11
vulnerability VCID-dky9-v96e-pubh
12
vulnerability VCID-ffp4-23na-rkgr
13
vulnerability VCID-gwnb-e3gt-kqcb
14
vulnerability VCID-gzdw-424p-mqfa
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-mnx8-118d-efcr
18
vulnerability VCID-nctp-rev5-puej
19
vulnerability VCID-pd2f-4kxt-bkgp
20
vulnerability VCID-rcr9-z41f-sqbr
21
vulnerability VCID-sgdq-5ha7-nfh2
22
vulnerability VCID-t8vm-tfnq-5kak
23
vulnerability VCID-ueyy-v42v-7ydh
24
vulnerability VCID-vve8-f9s9-v7ft
25
vulnerability VCID-wwx4-ns21-k3hd
26
vulnerability VCID-wytb-bryq-yqb4
27
vulnerability VCID-xqha-pgc4-3udb
28
vulnerability VCID-ykj6-ptd4-7qfs
29
vulnerability VCID-z5u9-5522-h7fx
30
vulnerability VCID-z693-m8fg-63cc
31
vulnerability VCID-zjqu-hbpf-9qe1
32
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.7
2
url pkg:composer/moodle/moodle@4.4.3
purl pkg:composer/moodle/moodle@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-a1ek-x154-5ydy
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dr5e-6s1a-6uas
18
vulnerability VCID-f1da-1duc-2uhb
19
vulnerability VCID-ffp4-23na-rkgr
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-hufb-p6pa-63c9
23
vulnerability VCID-j3ts-5ghc-4qct
24
vulnerability VCID-kwhy-pkt9-1kfe
25
vulnerability VCID-m2a7-q28u-1yfw
26
vulnerability VCID-mnx8-118d-efcr
27
vulnerability VCID-nctp-rev5-puej
28
vulnerability VCID-pd2f-4kxt-bkgp
29
vulnerability VCID-sgdq-5ha7-nfh2
30
vulnerability VCID-t8vm-tfnq-5kak
31
vulnerability VCID-ueyy-v42v-7ydh
32
vulnerability VCID-vve8-f9s9-v7ft
33
vulnerability VCID-wby4-h9ud-1yh5
34
vulnerability VCID-wwx4-ns21-k3hd
35
vulnerability VCID-wytb-bryq-yqb4
36
vulnerability VCID-xqha-pgc4-3udb
37
vulnerability VCID-yby1-g45r-rugg
38
vulnerability VCID-ykj6-ptd4-7qfs
39
vulnerability VCID-z5u9-5522-h7fx
40
vulnerability VCID-z693-m8fg-63cc
41
vulnerability VCID-zjqu-hbpf-9qe1
42
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.3
aliases CVE-2024-45690, GHSA-fhg2-r2h9-h7q8
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vsrk-zp7j-w7bk
55
url VCID-wwny-t2ez-y3e1
vulnerability_id VCID-wwny-t2ez-y3e1
summary 
Moodle has insufficient capability checks
A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64984
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64984
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-43435
reference_id
reference_type
scores
0
value 0.00529
scoring_system epss
scoring_elements 0.67562
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-43435
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2304263
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:57:03Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2304263
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://moodle.org/mod/forum/discuss.php?d=461205
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-12T14:57:03Z/
url https://moodle.org/mod/forum/discuss.php?d=461205
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-43435
reference_id CVE-2024-43435
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-43435
6
reference_url https://github.com/advisories/GHSA-4gq2-x5w4-7hp8
reference_id GHSA-4gq2-x5w4-7hp8
reference_type
scores
url https://github.com/advisories/GHSA-4gq2-x5w4-7hp8
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.9
purl pkg:composer/moodle/moodle@4.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-2urf-d2qr-abdy
2
vulnerability VCID-657g-68tv-dkam
3
vulnerability VCID-7trf-g8dq-tua1
4
vulnerability VCID-9rqr-xzr8-5fgf
5
vulnerability VCID-9xk9-qb9x-jfcs
6
vulnerability VCID-j3ts-5ghc-4qct
7
vulnerability VCID-m2a7-q28u-1yfw
8
vulnerability VCID-mnx8-118d-efcr
9
vulnerability VCID-t8vm-tfnq-5kak
10
vulnerability VCID-vsrk-zp7j-w7bk
11
vulnerability VCID-ykj6-ptd4-7qfs
12
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.9
1
url pkg:composer/moodle/moodle@4.3.6
purl pkg:composer/moodle/moodle@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6cvg-r9am-wbh5
8
vulnerability VCID-7trf-g8dq-tua1
9
vulnerability VCID-8uah-srba-6ubb
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-a1ek-x154-5ydy
13
vulnerability VCID-dky9-v96e-pubh
14
vulnerability VCID-ffp4-23na-rkgr
15
vulnerability VCID-gwnb-e3gt-kqcb
16
vulnerability VCID-gzdw-424p-mqfa
17
vulnerability VCID-j3ts-5ghc-4qct
18
vulnerability VCID-m2a7-q28u-1yfw
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-nctp-rev5-puej
21
vulnerability VCID-pd2f-4kxt-bkgp
22
vulnerability VCID-rcr9-z41f-sqbr
23
vulnerability VCID-sgdq-5ha7-nfh2
24
vulnerability VCID-t8vm-tfnq-5kak
25
vulnerability VCID-ueyy-v42v-7ydh
26
vulnerability VCID-vsrk-zp7j-w7bk
27
vulnerability VCID-vve8-f9s9-v7ft
28
vulnerability VCID-wwx4-ns21-k3hd
29
vulnerability VCID-wytb-bryq-yqb4
30
vulnerability VCID-xqha-pgc4-3udb
31
vulnerability VCID-ykj6-ptd4-7qfs
32
vulnerability VCID-z5u9-5522-h7fx
33
vulnerability VCID-z693-m8fg-63cc
34
vulnerability VCID-zjqu-hbpf-9qe1
35
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.6
2
url pkg:composer/moodle/moodle@4.4.2
purl pkg:composer/moodle/moodle@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3yre-ft3n-2fd3
6
vulnerability VCID-44zf-1dw7-qkf5
7
vulnerability VCID-4zvp-nmrk-4qbq
8
vulnerability VCID-5snb-dyv3-efe9
9
vulnerability VCID-5xhb-mx3v-fuhs
10
vulnerability VCID-61ry-zz34-8qhj
11
vulnerability VCID-657g-68tv-dkam
12
vulnerability VCID-6cvg-r9am-wbh5
13
vulnerability VCID-7trf-g8dq-tua1
14
vulnerability VCID-8uah-srba-6ubb
15
vulnerability VCID-9rqr-xzr8-5fgf
16
vulnerability VCID-9xk9-qb9x-jfcs
17
vulnerability VCID-a1ek-x154-5ydy
18
vulnerability VCID-dky9-v96e-pubh
19
vulnerability VCID-dr5e-6s1a-6uas
20
vulnerability VCID-f1da-1duc-2uhb
21
vulnerability VCID-ffp4-23na-rkgr
22
vulnerability VCID-gwnb-e3gt-kqcb
23
vulnerability VCID-gzdw-424p-mqfa
24
vulnerability VCID-hufb-p6pa-63c9
25
vulnerability VCID-j3ts-5ghc-4qct
26
vulnerability VCID-jjsw-9p4b-m3e5
27
vulnerability VCID-kwhy-pkt9-1kfe
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-mnx8-118d-efcr
30
vulnerability VCID-nctp-rev5-puej
31
vulnerability VCID-pd2f-4kxt-bkgp
32
vulnerability VCID-sgdq-5ha7-nfh2
33
vulnerability VCID-t8vm-tfnq-5kak
34
vulnerability VCID-ueyy-v42v-7ydh
35
vulnerability VCID-vsrk-zp7j-w7bk
36
vulnerability VCID-vve8-f9s9-v7ft
37
vulnerability VCID-wby4-h9ud-1yh5
38
vulnerability VCID-wwx4-ns21-k3hd
39
vulnerability VCID-wytb-bryq-yqb4
40
vulnerability VCID-xqha-pgc4-3udb
41
vulnerability VCID-yby1-g45r-rugg
42
vulnerability VCID-ykj6-ptd4-7qfs
43
vulnerability VCID-z5u9-5522-h7fx
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.2
aliases CVE-2024-43435, GHSA-4gq2-x5w4-7hp8
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wwny-t2ez-y3e1
56
url VCID-x1pc-1kuc-kug2
vulnerability_id VCID-x1pc-1kuc-kug2
summary 
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-72249
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T19:58:39Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-72249
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5550
reference_id
reference_type
scores
0
value 0.01474
scoring_system epss
scoring_elements 0.81317
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5550
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243452
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T19:58:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243452
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/77766f9c8af8fc8d861d7ac09ce4e1f6e72faca7
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/77766f9c8af8fc8d861d7ac09ce4e1f6e72faca7
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451591
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T19:58:39Z/
url https://moodle.org/mod/forum/discuss.php?d=451591
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5550
reference_id CVE-2023-5550
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5550
7
reference_url https://github.com/advisories/GHSA-5cvx-cwpx-9rjh
reference_id GHSA-5cvx-cwpx-9rjh
reference_type
scores
url https://github.com/advisories/GHSA-5cvx-cwpx-9rjh
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.3
purl pkg:composer/moodle/moodle@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6726-ca8y-4uez
10
vulnerability VCID-6p1s-2r14-z7ax
11
vulnerability VCID-7p54-yn8k-aydw
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-893t-9cja-43g2
14
vulnerability VCID-9rqr-xzr8-5fgf
15
vulnerability VCID-9xk9-qb9x-jfcs
16
vulnerability VCID-ajrr-8392-kkcw
17
vulnerability VCID-b3vw-8hzh-dybx
18
vulnerability VCID-d92c-j4yy-fud3
19
vulnerability VCID-dp61-6ban-cyda
20
vulnerability VCID-evef-t6cx-vqcc
21
vulnerability VCID-g3km-hbas-x3cg
22
vulnerability VCID-gycn-bey2-4yam
23
vulnerability VCID-hmuw-bjax-37bz
24
vulnerability VCID-j3ts-5ghc-4qct
25
vulnerability VCID-jkyc-esnt-p3ay
26
vulnerability VCID-m2a7-q28u-1yfw
27
vulnerability VCID-m3jj-r66a-d7cv
28
vulnerability VCID-m9tk-fa8m-zbah
29
vulnerability VCID-mhh7-n7ut-hkh6
30
vulnerability VCID-mnx8-118d-efcr
31
vulnerability VCID-ms4e-v5zc-9kgc
32
vulnerability VCID-pged-191y-quhm
33
vulnerability VCID-qabh-bpmn-1ye5
34
vulnerability VCID-qruy-fs4p-43h1
35
vulnerability VCID-r1ug-e8x6-83gt
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rm2q-xde7-a3ej
39
vulnerability VCID-sdxf-f1b3-t3cc
40
vulnerability VCID-t8vm-tfnq-5kak
41
vulnerability VCID-tgs8-3n7x-cyc1
42
vulnerability VCID-umd1-pmr4-4bgs
43
vulnerability VCID-vsrk-zp7j-w7bk
44
vulnerability VCID-wwny-t2ez-y3e1
45
vulnerability VCID-y4g2-328f-qbge
46
vulnerability VCID-yc6t-am1p-x3ev
47
vulnerability VCID-ykj6-ptd4-7qfs
48
vulnerability VCID-ytd5-2swj-wkh1
49
vulnerability VCID-z5u9-5522-h7fx
50
vulnerability VCID-ztjp-76rp-hfhk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.3
1
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5550, GHSA-5cvx-cwpx-9rjh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x1pc-1kuc-kug2
57
url VCID-y4g2-328f-qbge
vulnerability_id VCID-y4g2-328f-qbge
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80712
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80712
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34003
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.39039
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34003
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458391
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-01T13:16:51Z/
url https://moodle.org/mod/forum/discuss.php?d=458391
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34003
reference_id CVE-2024-34003
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34003
5
reference_url https://github.com/advisories/GHSA-jg4f-8w9x-jv35
reference_id GHSA-jg4f-8w9x-jv35
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jg4f-8w9x-jv35
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34003, GHSA-jg4f-8w9x-jv35
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y4g2-328f-qbge
58
url VCID-yc6t-am1p-x3ev
vulnerability_id VCID-yc6t-am1p-x3ev
summary 
Authorization Bypass in moodle
Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25983
reference_id
reference_type
scores
0
value 0.00241
scoring_system epss
scoring_elements 0.47572
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25983
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264099
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2264099
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/4cae44dd0e9a7da47d08d9b75e0ebba0e4b422f4
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/4cae44dd0e9a7da47d08d9b75e0ebba0e4b422f4
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
6
reference_url https://moodle.org/mod/forum/discuss.php?d=455641
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url https://moodle.org/mod/forum/discuss.php?d=455641
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25983
reference_id CVE-2024-25983
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25983
8
reference_url https://github.com/advisories/GHSA-9r26-5w88-qhp9
reference_id GHSA-9r26-5w88-qhp9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9r26-5w88-qhp9
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
reference_id KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-20T18:32:00Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.6
purl pkg:composer/moodle/moodle@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-5ba5-pee7-6kh1
7
vulnerability VCID-5s33-v19s-sqd6
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6p1s-2r14-z7ax
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-893t-9cja-43g2
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-9xk9-qb9x-jfcs
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-b3vw-8hzh-dybx
17
vulnerability VCID-d92c-j4yy-fud3
18
vulnerability VCID-dp61-6ban-cyda
19
vulnerability VCID-evef-t6cx-vqcc
20
vulnerability VCID-g3km-hbas-x3cg
21
vulnerability VCID-hmuw-bjax-37bz
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-jkyc-esnt-p3ay
24
vulnerability VCID-m2a7-q28u-1yfw
25
vulnerability VCID-m3jj-r66a-d7cv
26
vulnerability VCID-m9tk-fa8m-zbah
27
vulnerability VCID-mnx8-118d-efcr
28
vulnerability VCID-ms4e-v5zc-9kgc
29
vulnerability VCID-pged-191y-quhm
30
vulnerability VCID-qruy-fs4p-43h1
31
vulnerability VCID-r4m3-9prr-dkby
32
vulnerability VCID-r5w9-cbyk-hqc6
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-t8vm-tfnq-5kak
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-umd1-pmr4-4bgs
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-wwny-t2ez-y3e1
40
vulnerability VCID-y4g2-328f-qbge
41
vulnerability VCID-ykj6-ptd4-7qfs
42
vulnerability VCID-ytd5-2swj-wkh1
43
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.6
1
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
aliases CVE-2024-25983, GHSA-9r26-5w88-qhp9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yc6t-am1p-x3ev
59
url VCID-ykj6-ptd4-7qfs
vulnerability_id VCID-ykj6-ptd4-7qfs
summary 
Moodle affected by a code injection vulnerability
A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a full compromise of the Moodle application.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67847
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.08982
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67847
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=471297#p1892199
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=471297#p1892199
3
reference_url https://access.redhat.com/security/cve/CVE-2025-67847
reference_id CVE-2025-67847
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-24T04:55:19Z/
url https://access.redhat.com/security/cve/CVE-2025-67847
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67847
reference_id CVE-2025-67847
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67847
5
reference_url https://github.com/advisories/GHSA-xvmh-25jw-gmmm
reference_id GHSA-xvmh-25jw-gmmm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xvmh-25jw-gmmm
fixed_packages
0
url pkg:composer/moodle/moodle@4.4.12
purl pkg:composer/moodle/moodle@4.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.12
1
url pkg:composer/moodle/moodle@4.5.8
purl pkg:composer/moodle/moodle@4.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.5.8
2
url pkg:composer/moodle/moodle@5.0.4
purl pkg:composer/moodle/moodle@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.0.4
3
url pkg:composer/moodle/moodle@5.1.1
purl pkg:composer/moodle/moodle@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-657g-68tv-dkam
1
vulnerability VCID-j3ts-5ghc-4qct
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@5.1.1
aliases CVE-2025-67847, GHSA-xvmh-25jw-gmmm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ykj6-ptd4-7qfs
60
url VCID-ytd5-2swj-wkh1
vulnerability_id VCID-ytd5-2swj-wkh1
summary 
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34004
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54226
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34004
1
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
2
reference_url https://moodle.org/mod/forum/discuss.php?d=458393
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-03T14:26:27Z/
url https://moodle.org/mod/forum/discuss.php?d=458393
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34004
reference_id CVE-2024-34004
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34004
4
reference_url https://github.com/advisories/GHSA-q3cm-ccrm-2mr6
reference_id GHSA-q3cm-ccrm-2mr6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q3cm-ccrm-2mr6
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.7
purl pkg:composer/moodle/moodle@4.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-21mq-pewz-ekdt
2
vulnerability VCID-2urf-d2qr-abdy
3
vulnerability VCID-2wsu-7rzh-h7cs
4
vulnerability VCID-3nu2-1cwj-sfdd
5
vulnerability VCID-3nvq-s7y5-fufr
6
vulnerability VCID-657g-68tv-dkam
7
vulnerability VCID-6p1s-2r14-z7ax
8
vulnerability VCID-7p54-yn8k-aydw
9
vulnerability VCID-7trf-g8dq-tua1
10
vulnerability VCID-9rqr-xzr8-5fgf
11
vulnerability VCID-9xk9-qb9x-jfcs
12
vulnerability VCID-ajrr-8392-kkcw
13
vulnerability VCID-d92c-j4yy-fud3
14
vulnerability VCID-g3km-hbas-x3cg
15
vulnerability VCID-j3ts-5ghc-4qct
16
vulnerability VCID-m2a7-q28u-1yfw
17
vulnerability VCID-m3jj-r66a-d7cv
18
vulnerability VCID-m9tk-fa8m-zbah
19
vulnerability VCID-mnx8-118d-efcr
20
vulnerability VCID-pged-191y-quhm
21
vulnerability VCID-qruy-fs4p-43h1
22
vulnerability VCID-r4m3-9prr-dkby
23
vulnerability VCID-r5w9-cbyk-hqc6
24
vulnerability VCID-rm2q-xde7-a3ej
25
vulnerability VCID-sdxf-f1b3-t3cc
26
vulnerability VCID-t8vm-tfnq-5kak
27
vulnerability VCID-tgs8-3n7x-cyc1
28
vulnerability VCID-vsrk-zp7j-w7bk
29
vulnerability VCID-wwny-t2ez-y3e1
30
vulnerability VCID-ykj6-ptd4-7qfs
31
vulnerability VCID-z5u9-5522-h7fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.7
1
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
aliases CVE-2024-34004, GHSA-q3cm-ccrm-2mr6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ytd5-2swj-wkh1
61
url VCID-z5u9-5522-h7fx
vulnerability_id VCID-z5u9-5522-h7fx
summary 
moodle: Some users can delete audiences of other reports
A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-48898
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45845
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-48898
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2318820
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-18T14:56:14Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2318820
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48898
reference_id CVE-2024-48898
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48898
4
reference_url https://github.com/advisories/GHSA-fjq9-452g-jg3q
reference_id GHSA-fjq9-452g-jg3q
reference_type
scores
url https://github.com/advisories/GHSA-fjq9-452g-jg3q
fixed_packages
0
url pkg:composer/moodle/moodle@4.2.11
purl pkg:composer/moodle/moodle@4.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1efm-18zh-w7gm
1
vulnerability VCID-657g-68tv-dkam
2
vulnerability VCID-7trf-g8dq-tua1
3
vulnerability VCID-j3ts-5ghc-4qct
4
vulnerability VCID-m2a7-q28u-1yfw
5
vulnerability VCID-ykj6-ptd4-7qfs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.11
1
url pkg:composer/moodle/moodle@4.3.8
purl pkg:composer/moodle/moodle@4.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-657g-68tv-dkam
6
vulnerability VCID-6cvg-r9am-wbh5
7
vulnerability VCID-7trf-g8dq-tua1
8
vulnerability VCID-8uah-srba-6ubb
9
vulnerability VCID-a1ek-x154-5ydy
10
vulnerability VCID-dky9-v96e-pubh
11
vulnerability VCID-ffp4-23na-rkgr
12
vulnerability VCID-gwnb-e3gt-kqcb
13
vulnerability VCID-gzdw-424p-mqfa
14
vulnerability VCID-j3ts-5ghc-4qct
15
vulnerability VCID-m2a7-q28u-1yfw
16
vulnerability VCID-nctp-rev5-puej
17
vulnerability VCID-pd2f-4kxt-bkgp
18
vulnerability VCID-rcr9-z41f-sqbr
19
vulnerability VCID-sgdq-5ha7-nfh2
20
vulnerability VCID-ueyy-v42v-7ydh
21
vulnerability VCID-vve8-f9s9-v7ft
22
vulnerability VCID-wwx4-ns21-k3hd
23
vulnerability VCID-wytb-bryq-yqb4
24
vulnerability VCID-xqha-pgc4-3udb
25
vulnerability VCID-ykj6-ptd4-7qfs
26
vulnerability VCID-z693-m8fg-63cc
27
vulnerability VCID-zjqu-hbpf-9qe1
28
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.8
2
url pkg:composer/moodle/moodle@4.4.4
purl pkg:composer/moodle/moodle@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-3yre-ft3n-2fd3
5
vulnerability VCID-44zf-1dw7-qkf5
6
vulnerability VCID-4zvp-nmrk-4qbq
7
vulnerability VCID-5snb-dyv3-efe9
8
vulnerability VCID-5xhb-mx3v-fuhs
9
vulnerability VCID-61ry-zz34-8qhj
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-7trf-g8dq-tua1
13
vulnerability VCID-8uah-srba-6ubb
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-dky9-v96e-pubh
16
vulnerability VCID-dr5e-6s1a-6uas
17
vulnerability VCID-f1da-1duc-2uhb
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-gwnb-e3gt-kqcb
20
vulnerability VCID-gzdw-424p-mqfa
21
vulnerability VCID-hufb-p6pa-63c9
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-nctp-rev5-puej
25
vulnerability VCID-pd2f-4kxt-bkgp
26
vulnerability VCID-sgdq-5ha7-nfh2
27
vulnerability VCID-ueyy-v42v-7ydh
28
vulnerability VCID-vve8-f9s9-v7ft
29
vulnerability VCID-wby4-h9ud-1yh5
30
vulnerability VCID-wwx4-ns21-k3hd
31
vulnerability VCID-wytb-bryq-yqb4
32
vulnerability VCID-xqha-pgc4-3udb
33
vulnerability VCID-yby1-g45r-rugg
34
vulnerability VCID-ykj6-ptd4-7qfs
35
vulnerability VCID-z693-m8fg-63cc
36
vulnerability VCID-zjqu-hbpf-9qe1
37
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.4.4
aliases CVE-2024-48898, GHSA-fjq9-452g-jg3q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z5u9-5522-h7fx
62
url VCID-ztjp-76rp-hfhk
vulnerability_id VCID-ztjp-76rp-hfhk
summary 
Moodle Improper Access Control vulnerability
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:05:11Z/
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5542
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50567
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5542
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2243441
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:05:11Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2243441
3
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
4
reference_url https://github.com/moodle/moodle/commit/b0bb97ee3b481dd85d8f1ed3612f70c9d1939014
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/b0bb97ee3b481dd85d8f1ed3612f70c9d1939014
5
reference_url https://moodle.org/mod/forum/discuss.php?d=451583
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-21T17:05:11Z/
url https://moodle.org/mod/forum/discuss.php?d=451583
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5542
reference_id CVE-2023-5542
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5542
7
reference_url https://github.com/advisories/GHSA-8mm2-m2gp-c6x2
reference_id GHSA-8mm2-m2gp-c6x2
reference_type
scores
url https://github.com/advisories/GHSA-8mm2-m2gp-c6x2
fixed_packages
0
url pkg:composer/moodle/moodle@4.3.0-rc2
purl pkg:composer/moodle/moodle@4.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-29mv-feyq-guew
4
vulnerability VCID-2urf-d2qr-abdy
5
vulnerability VCID-3nu2-1cwj-sfdd
6
vulnerability VCID-3nvq-s7y5-fufr
7
vulnerability VCID-3yre-ft3n-2fd3
8
vulnerability VCID-657g-68tv-dkam
9
vulnerability VCID-6cvg-r9am-wbh5
10
vulnerability VCID-7p54-yn8k-aydw
11
vulnerability VCID-7trf-g8dq-tua1
12
vulnerability VCID-8uah-srba-6ubb
13
vulnerability VCID-9rqr-xzr8-5fgf
14
vulnerability VCID-a1ek-x154-5ydy
15
vulnerability VCID-ajrr-8392-kkcw
16
vulnerability VCID-dky9-v96e-pubh
17
vulnerability VCID-dp61-6ban-cyda
18
vulnerability VCID-ffp4-23na-rkgr
19
vulnerability VCID-g3km-hbas-x3cg
20
vulnerability VCID-gwnb-e3gt-kqcb
21
vulnerability VCID-gzdw-424p-mqfa
22
vulnerability VCID-j3ts-5ghc-4qct
23
vulnerability VCID-m2a7-q28u-1yfw
24
vulnerability VCID-m3jj-r66a-d7cv
25
vulnerability VCID-m9tk-fa8m-zbah
26
vulnerability VCID-nctp-rev5-puej
27
vulnerability VCID-pd2f-4kxt-bkgp
28
vulnerability VCID-pged-191y-quhm
29
vulnerability VCID-qruy-fs4p-43h1
30
vulnerability VCID-r4m3-9prr-dkby
31
vulnerability VCID-r5w9-cbyk-hqc6
32
vulnerability VCID-rcr9-z41f-sqbr
33
vulnerability VCID-rm2q-xde7-a3ej
34
vulnerability VCID-sdxf-f1b3-t3cc
35
vulnerability VCID-sgdq-5ha7-nfh2
36
vulnerability VCID-tgs8-3n7x-cyc1
37
vulnerability VCID-ueyy-v42v-7ydh
38
vulnerability VCID-vsrk-zp7j-w7bk
39
vulnerability VCID-vve8-f9s9-v7ft
40
vulnerability VCID-wwx4-ns21-k3hd
41
vulnerability VCID-wytb-bryq-yqb4
42
vulnerability VCID-xqha-pgc4-3udb
43
vulnerability VCID-ykj6-ptd4-7qfs
44
vulnerability VCID-z693-m8fg-63cc
45
vulnerability VCID-zjqu-hbpf-9qe1
46
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0-rc2
aliases CVE-2023-5542, GHSA-8mm2-m2gp-c6x2
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ztjp-76rp-hfhk
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.2.2