| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 4.2.0-beta, < 4.4.11≥ 4.5.0-beta, < 4.5.7≥ 5.0.0-beta, < 5.0.3< 4.1.21 | 4.4.114.5.75.0.34.1.21 |
| moodle | ≥ 4.1.0, < 4.1.21≥ 4.4.0, < 4.4.11≥ 4.5.0, < 4.5.7≥ 5.0.0, < 5.0.3 | 4.1.214.4.114.5.75.0.3 |
Moodle's mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free