ROS-20250307-14

🗓️ 07 Mar 2025 00:00:00Reported by RedosType

redos

redos🔗 redos.red-soft.ru👁 19 Views

Moodle virtual learning environment has vulnerabilities allowing unauthorized access to protected information.

Reporter	Title	Published	Views	Family All 119
GithubExploit	Exploit for Cross-site Scripting in Moodle	12 Apr 202523:17	–	githubexploit
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.	5 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-26525	24 Feb 202520:22	–	circl
Circl	CVE-2025-26526	24 Feb 202520:22	–	circl
Circl	CVE-2025-26527	24 Feb 202520:22	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	moodle	4.3.10-1	UNKNOWN

07 Mar 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.1 - 8.6

EPSS0.00478

SSVC

moodle vulnerability access control remote attacker protected information proprietary data cross-site scripting web page structure insufficient protection security measures.