ROS-2-1749

🗓️ 24 Dec 2021 00:00:00Reported by RedosType

redos

redos🔗 redos.red-soft.ru👁 5 Views

Multiple Moodle vulnerabilities allow remote attackers to execute code, expose data, and cause DoS attacks.

Reporter	Title	Published	Views	Family All 201
BDU FSTEC	The vulnerability in the virtual learning environment Moodle arises from insufficient cleaning of data provided by users at the final authentication stage of LTI. This allows attackers to execute cross-site scripting (XSS) attacks.	1 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the disclosure of information that allows a intruder to gain unauthorized access to protected information in CSV format.	1 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, which stems from insufficient verification of input data, allows a intruder to gain unauthorized access to protected information.	1 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual training environment Moodle arises due to insufficient cleaning of data provided by users in XML-RPC calls, allowing attackers to execute arbitrary SQL queries.	1 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the lack of protection for the website structure, allows a hacker to execute arbitrary HTML code and script code in the user’s browser within the context of the vulnerable website.	1 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.	1 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.	1 Jun 202100:00	–	bdu_fstec
Circl	CVE-2021-32472	11 Mar 202220:15	–	circl
Circl	CVE-2021-32474	11 Mar 202220:21	–	circl
Circl	CVE-2021-32475	11 Mar 202220:15	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
redos	–	–	unknown	–	UNKNOWN

24 Dec 2021 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 25

CVSS 3.17.5

EPSS0.03402

moodle vulnerabilities remote attacker code execution data exposure denial of service.