Moodle 4.4.x < 4.4.2 Multiple Vulnerabilities

🗓️ 10 Apr 2025 00:00:00Reported by This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type

nessus

nessus🔗 www.tenable.com👁 3 Views

Moodle versions prior to specified thresholds have multiple severe security vulnerabilities.

Reporter	Title	Published	Views	Family All 246
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the lack of authentication, allows a violator to delete data.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to improper restrictions on the path name to a limited catalog, allows a intruder to gain access to confidential data.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the disclosure of information through caching, allows a perpetrator to gain access to confidential information.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries in the database.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to deficiencies in access control, allows a intruder to compromise the target system.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the storage of critical information in an open manner, allows a perpetrator to gain access to confidential information.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out attacks using cross-site scripting (XSS).	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the insecure storage of confidential information, allows a perpetrator to gain access to confidential data.	25 Nov 202400:00	–	bdu_fstec

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.moodle.org/gw
git	www.git.moodle.org/gw
moodle	www.moodle.org/mod/forum/discuss.php
git	www.git.moodle.org/gw
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.moodle.org/gw
git	www.git.moodle.org/gw
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

10 Apr 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.1

EPSS0.00646

SSVC

moodle vulnerabilities local file inclusion reflected cross site scripting insecure direct object reference sql injection cross site request forgery authorization issues user information visibility cache poisoning file read risk