Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@2.2.8
purl pkg:composer/moodle/moodle@2.2.8
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (8)

Advisory Summary Aliases
GHSA-8r7x-qq55-74v2
Moodle does not enforce the forceloginforprofiles setting `user/view.php` in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … CVE-2013-1830
GHSA-664q-mrxx-2x2v
Moodle does not properly manage privileges for WebDAV repositories Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and … CVE-2013-1836
GHSA-89f3-74m6-g27g
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module Multiple cross-site scripting (XSS) vulnerabilities in the File Picker … CVE-2013-1833
GHSA-cc94-hwj3-rf65
Moodle's login_as feature leaks information from external repositories Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … CVE-2013-1835
GHSA-xr24-jp5c-6c4v
Moodle reveals absolute path in exception message lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … CVE-2013-1831
GHSA-pgp5-rcwp-qvfg
Moodle includes the WebDAV password in the configuration form repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before … CVE-2013-1832
GHSA-prrh-679x-79qh
Moodle allows remote authenticated users to reassign notes notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, … CVE-2013-1834
CVE-2013-1833
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module … GHSA-89f3-74m6-g27g