Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-67857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized...

5.3CVSS5.4AI score0.00017EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/03 10:52 a.m.21 views

CVE-2025-67857 Moodle: moodle: data exposure of user identifiers in urls

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure...

4.3CVSS0.00017EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/25 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-62400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or...

6.5CVSS6AI score0.00059EPSS
Exploits0References2
OSV
OSV
added 2025/10/23 12:31 p.m.1 views

GHSA-422V-W6C5-VQ42 Moodle exposed the names of hidden groups to users

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...

4.3CVSS6.7AI score0.00059EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/23 11:28 a.m.2 views

EUVD-2025-35667

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...

4.3CVSS6.2AI score0.00059EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2024-38275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sen...

7.5CVSS7.2AI score0.00546EPSS
Exploits0References2
Rows per page
Query Builder