CVE-2018-1043

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...

CVE-2018-1042

Moodle 3.x has Server Side Request Forgery in the filepicker...

Server side request forgery (ssrf)

Moodle 3.x has Server Side Request Forgery in the filepicker...

CVE-2018-1042

Moodle 3.x has Server Side Request Forgery in the filepicker...

CVE-2018-1043

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...

CVE-2018-1042

Moodle 3.x has Server Side Request Forgery in the filepicker...

CVE-2018-1045

In Moodle 3.x, there is XSS via a calendar event name...

Session fixation

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...

CVE-2018-1044

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings...

CVE-2018-1044

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings...

Code injection

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings...

CVE-2018-1044

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings...

CVE-2018-1043

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...

CVE-2018-1043

The data points to CVE-2018-1043 affecting Moodle 3.x: the blocked hosts list can be bypassed using multiple A-record hostnames. The related metrics indicate a CVSS v3 base score of 6.5 (I=High, A=None, C=None; network attack, low complexity, low privileges required, no user interaction). No expl...

CVE-2018-1044

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings...

CVE-2018-1043

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames...

CVE-2018-1042

Summary of CVE-2018-1042 (Moodle SSRF): Moodle 3.x is affected by a server-side request forgery in the filepicker. The underlying issue is an SSRF in the filepicker function, enabling an attacker (reported as authenticated) to issue requests from the vulnerable Moodle host, potentially probing in...

CVE-2018-1042

Moodle 3.x has Server Side Request Forgery in the filepicker...

CVE-2018-1045

In Moodle 3.x, there is XSS via a calendar event name...

CVE-2018-1044

CVE-2018-1044 affects Moodle 3.x where quiz web services expose quiz results to users when settings prohibit it. Documented impact is that authorized users could access results contrary to configuration; no explicit patch/version remediation is provided in the initial description. CVSS metrics sh...