Unknown Moodle vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in Unknown Moodle, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2019-3852ubuntumoodle+2
EPSS score
1.06%
A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilities5.4CVE-2019-3847ubuntumoodle+2
EPSS score
2.22%
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.