Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@2.0.7
purl pkg:composer/moodle/moodle@2.0.7
Tags Ghost
Next non-vulnerable version 4.5.9
Latest non-vulnerable version 5.1.2
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-2x36-7xfm-pgm7
Aliases:
CVE-2012-1157
Moodle default permissions too permissive Moodle before 2.2.2 default settings allowed all repositories to be viewable by all authenticated users. There are no reported fixed by versions.
GHSA-358r-g2xw-7c83
Aliases:
CVE-2012-1156
Moodle backs up private files Moodle before 2.2.2, 2.1.5, and 2.0.8 had users' private files included in course backups unnecessarily. There are no reported fixed by versions.
GHSA-p9hr-f4xj-8w8r
Aliases:
CVE-2012-1159
Moodle included private user files in course backups Moodle before 2.2.2 is vulnerable to information disclosure because course backups were … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-72gv-qqrp-h9qg
Moodle Users Can Bypass Deleted Status The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before … CVE-2012-0797