Moodle Information Disclosure Vulnerability (CNVD-2025-11218)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that originates from the BigBlueButton web service that can disclose meetin...

Moodle Information Disclosure Vulnerability (CNVD-2021-28716)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17, which stems from a failure to validate that a requesting...

Information Disclosure

moodle/moodle is vulnerable to information disclosure. The links in the assignment submission comments opens from the same window when clicked, and can potentially contain confidential information that are exposed in the Referrer header...

Information Disclosure

Moodle is vulnerable to information disclosure. The attacks exist because it ignores "don't send" attributes. As a result of ignoring these attributes the site sends sensitive information to remote hub even though it shouldn't have...