Lucene search
K

9 matches found

OSV
OSV
added 2026/01/26 2:49 p.m.4 views

BIT-MOODLE-2025-3628 Moodle: moodle assignment submission search leaks anonymous student identities

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

4.3CVSS5.8AI score0.00111EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/27 12:2 p.m.1 views

CVE-2025-12270 LearnHouse Student Assignment Submission sub_file resource injection

A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an unknown function of the file /api/v1/assignments/assignmentid/tasks/taskid/subfile of the component Student Assignment Submission Handler. This manipulation causes improper...

5.3CVSS6.3AI score0.00047EPSS
Exploits1References4
NVD
NVD
added 2025/10/25 6:15 a.m.2 views

CVE-2025-6639

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.8.3 due to missing validation on a user controlled key when viewing and editing assignments through the tutorassignmentsubmit...

5.4CVSS0.00035EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/25 5:31 a.m.4 views

EUVD-2025-35911

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.8.3 due to missing validation on a user controlled key when viewing and editing assignments through the tutorassignmentsubmit...

5.4CVSS5.1AI score0.00035EPSS
Exploits0References3
CNVD
CNVD
added 2025/05/07 12:0 a.m.2 views

Moodle Information Disclosure Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from the fact that anonymous assignment submissions can...

4.3CVSS4.2AI score0.00111EPSS
Exploits0References1
Veracode
Veracode
added 2025/04/30 7:15 a.m.6 views

Sensitive Information Disclosure

moodle/moodle is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper access control to search functionality exposing student identities in anonymous assignment submissions...

4.3CVSS6.6AI score0.00111EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/04/25 3:31 p.m.2 views

GHSA-69M9-RPRC-2X7G Moodle reveals student identities through assignment submissions search on anonymous submissions

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

4.3CVSS4.6AI score0.00111EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2025/04/25 3:31 p.m.12 views

Moodle reveals student identities through assignment submissions search on anonymous submissions

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

4.3CVSS7AI score0.00111EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2025/04/25 3:15 p.m.3 views

CVE-2025-3628

A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...

4.3CVSS0.00111EPSS
Exploits0References2
Rows per page
Query Builder