CVE-2014-3550

概要

参考情報

• git.moodle.org/gw · Patch
• openwall.com/lists/oss-security/2014/07/21/1
• securityfocus.com/bid/68762
• moodle.org/mod/forum/discuss.php · Vendor Advisory

moodle のその他の脆弱性

• CVE-2026-102588中 6.5A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an aut…
• CVE-2026-102587低 2.7A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user wit…
• CVE-2026-102586中 6.1A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cro…
• CVE-2026-102585中 4.3A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the…
• CVE-2026-102584中 4.3A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade pe…