Lucene search
+L

2365 matches found

Positive Technologies
Positive Technologies
added 2024/12/10 12:00 a.m.18 views

PT-2024-17305

Name of the Vulnerable Software and Affected Versions LearnPress – WordPress LMS Plugin versions up to, and including, 4.2.7.3 Description The issue concerns Sensitive Information Exposure, allowing unauthenticated attackers to extract potentially sensitive paid course material through the...

5.3CVSS5.3AI score0.01162EPSS
SaveExploits0References10
NVD
NVD
added 2024/11/27 10:15 p.m.29 views

CVE-2024-53260

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

6.8CVSS0.00468EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/27 9:28 p.m.14 views

CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

6.8CVSS6.9AI score0.00468EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/27 9:28 p.m.60 views

CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

6.8CVSS0.00468EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/27 9:28 p.m.26 views

CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

6.8CVSS6.8AI score
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/27 12:00 a.m.10 views

Autolab 安全漏洞

Autolab is an open source course management service from Autolab. It supports automatically graded programming assignments. A security vulnerability exists in Autolab 3.0.2 and prior versions that stems from the ability of users to change their first or last name, which could lead to the disclosu...

6.8CVSS6.1AI score0.00468EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/25 8:15 p.m.41 views

CVE-2024-53258

Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the downloadallsubmissions feature. This can allow for leakage of...

7.1CVSS0.00475EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/20 12:30 p.m.21 views

GHSA-R4XR-M393-778M Moodle IDOR when accessing list of course badges

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

5.3CVSS4.4AI score0.00306EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/11/20 12:30 p.m.27 views

Moodle IDOR when accessing list of course badges

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

6.8AI score0.00306EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/11/20 11:15 a.m.31 views

CVE-2024-48899

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

4.3CVSS0.00306EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/20 11:15 a.m.9 views

UBUNTU-CVE-2024-48899

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

4.3CVSS5.8AI score0.00306EPSS
SaveExploits0References3
Snyk
Snyk
added 2024/11/20 10:50 a.m.5 views

Access Control Bypass

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Access Control Bypass due to insufficient access control checks in the process of fetching course badges. Remediation Upgrade moodle/moodle to version 4.4.4 or higher. References - GitHub Commit -...

5.4CVSS6.9AI score0.00306EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/20 10:25 a.m.37 views

CVE-2024-48899 Moodle: idor when accessing list of course badges

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

0.00306EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/20 10:25 a.m.77 views

CVE-2024-48899

The Moodle learning platform is vulnerable to an Insecure Direct Object Reference (IDOR) , specifically an Access Control Bypass , in versions prior to 4.4.4 . The root cause is insufficient access control checks when fetching the list of course badges, which may allow users to view badges for co...

4.5AI score0.00306EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/20 10:25 a.m.20 views

CVE-2024-48899 Moodle: idor when accessing list of course badges

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

6.8AI score0.00306EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/20 10:25 a.m.15 views

CVE-2024-48899 Moodle: idor when accessing list of course badges

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

4.3CVSS5.9AI score
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.15 views

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a relatively laxity in the password checking logic, where certain...

5.4CVSS6.6AI score0.00414EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/20 12:00 a.m.15 views

PT-2024-33258 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A vulnerability was found in Moodle, where additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to...

8.8CVSS5.5AI score0.87536EPSS
SaveExploits8References76
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.19 views

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from the need to perform additional checks to ensure that users only ha...

4.3CVSS6.4AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/18 9:15 p.m.34 views

CVE-2024-52585

Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vulnerability in version 3.0.1 that can affect instructors and CAs on the grade submissions page. The issue is patched in version 3.0.2. One may apply the patch manually by editing...

5.4CVSS0.00263EPSS
SaveExploits0References2
Rows per page
Query Builder