[SECURITY] Fedora 38 Update: moodle-4.1.4-1.fc38

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

CVE-2023-32676

Summary: CVE-2023-32676 describes a tar slip/path traversal vulnerability in Autolab’s Install assessment feature. An authenticated instructor can upload a specially crafted tar file, causing files inside the archive to be expanded to attacker-chosen locations outside the target directory (e.g., ...

CVE-2023-32676 Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`)

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the Install assessment functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...

CVE-2023-32317

Autolab’s CVE-2023-32317 describes a tar-slip vulnerability in the MOSS cheat checker. An authenticated instructor can upload a crafted tar file via either the Base File Tar or Additional file archive inputs, causing expansion of archive contents to attacker-controlled paths (e.g., ../../../../tm...

Fedora: Security Advisory for moodle (FEDORA-2023-0ab503de3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for moodle (FEDORA-2023-60a90b6e6a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: moodle-4.1.3-1.fc38

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 37 Update: moodle-4.1.3-1.fc37

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 36 Update: moodle-3.11.14-1.fc36

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 36 Update: moodle-3.11.13-1.fc36

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

Autolab path traversal vulnerability

Autolab is a course management service. Autolab supports automatic grading of programming assignments. a path traversal vulnerability exists in Autolab. An attacker could exploit this vulnerability to view the contents of a file...

CVE-2022-41955

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was discovered in Autolab's MOSS functionalit...

CVE-2022-41956

CVE-2022-41956 affects Autolab (course management system). A file disclosure vulnerability existed in the remote handin feature, allowing an attacker to submit using paths outside the submission directory and view submitted files. The issue was fixed in version 2.10.0. Workarounds included: clear...

CVE-2022-41955 Autolab is vulnerable to remote code execution (RCE) via MOSS functionality

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was discovered in Autolab's MOSS functionalit...

CVE-2022-41955

CVE-2022-41955 affects Autolab and specifically its MOSS functionality. A remote code execution vulnerability exists whereby an instructor with access to MOSS could execute code on the server hosting Autolab. The issue has been patched in version 2.10.0. As a workaround, the recommended mitigatio...

MerlinsBoard 授权问题漏洞

MerlinsBoard is a course management system by Jonathan Lee Personal Developer. An authorization issue vulnerability exists in jvvlee MerlinsBoard, which stems from an unknown section of the file Grade Handler that manipulates to cause incorrect authorization...

[SECURITY] Fedora 36 Update: moodle-3.11.11-1.fc36

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 35 Update: moodle-3.11.11-1.fc35

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 37 Update: moodle-4.1-1.fc37

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

Fedora: Security Advisory for moodle (FEDORA-2022-f7fdcb1820)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...