Lucene search
K

38 matches found

OSV
OSV
added 2025/11/17 11:47 p.m.4 views

BIT-MOODLE-2025-62393 Moodle: course access permissions not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS6.1AI score0.00049EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/23 12:31 p.m.2 views

EUVD-2025-35673

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS5.7AI score0.00049EPSS
Exploits0References4
OSV
OSV
added 2025/10/23 12:31 p.m.2 views

GHSA-RJCM-7V2P-9265 Moodle course access permissions are not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS6.2AI score0.00049EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2025/10/23 12:31 p.m.4 views

Moodle course access permissions are not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS6.2AI score0.00049EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2025/10/23 12:15 p.m.7 views

CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS0.00049EPSS
Exploits0References3
OSV
OSV
added 2025/10/23 12:15 p.m.1 views

CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS6.1AI score0.00049EPSS
Exploits0References3
OSV
OSV
added 2025/10/23 12:15 p.m.1 views

UBUNTU-CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS5.8AI score0.00049EPSS
Exploits0References5
Snyk
Snyk
added 2025/10/23 11:46 a.m.3 views

Access Control Bypass

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Access Control Bypass in the courseoutputfragmentcourseoverview function. An attacker can gain unauthorized access to limited course information by bypassing access permission checks. Remediation...

5.3CVSS6.5AI score0.00049EPSS
Exploits0References2
CVE
CVE
added 2025/10/23 11:28 a.m.9 views

CVE-2025-62393

CVE-2025-62393 affects Moodle: a flaw in the course_output_fragment_course_overview permits viewing course details by unauthorized users due to incomplete enforcement of user access permissions. Affected component is the course overview output function; root cause is insufficient permission check...

4.3CVSS5.8AI score0.00049EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/23 11:28 a.m.2 views

CVE-2025-62393 Moodle: course access permissions not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS5.8AI score0.00049EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/23 11:28 a.m.4 views

CVE-2025-62393 Moodle: course access permissions not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS0.00049EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.1 views

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from the course overview output feature not fully enforcing user access...

4.3CVSS6.1AI score0.00049EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.3 views

PT-2025-43441

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists in the course overview output function where user access permissions are not fully enforced. This could allow unauthorized users to view informati...

4.3CVSS6.2AI score0.00049EPSS
Exploits0References16
RedhatCVE
RedhatCVE
added 2025/10/16 3:19 p.m.4 views

CVE-2025-62393

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...

4.3CVSS6.2AI score0.00049EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-5466

Malicious code in bioql PyPI...

4.3CVSS4.7AI score0.00199EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-2190

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00122EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-7491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the number of courses displayed in the course overview block configuration...

4.3CVSS5.3AI score0.00122EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-7531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.3, the course overview block reveals activities in hidden courses. CVE-2017-7531 Note that Nessus relies on the presence of the package as reported ...

4.3CVSS5AI score0.00199EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:47 a.m.3 views

SUSE CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

4.3CVSS6.8AI score0.00122EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:47 a.m.2 views

SUSE CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

4.3CVSS7AI score0.00199EPSS
Exploits0References3
Rows per page
Query Builder