CVE-2023-46858

Mô tả

Tham khảo

• docs.moodle.org/403/en/Security_FAQ · Product
• gist.github.com/Abid-Ahmad/12d2b4878eb731e8871b96b7d55125cd · Broken Link
• packetstormsecurity.com/files/175277/Moodle-4.3-Cross-Site-Scripting.html · Exploit

Lỗ hổng khác của moodle

• CVE-2026-102588TRUNG BÌNH 6.5A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an aut…
• CVE-2026-102587THẤP 2.7A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user wit…
• CVE-2026-102586TRUNG BÌNH 6.1A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cro…
• CVE-2026-102585TRUNG BÌNH 4.3A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the…
• CVE-2026-102584TRUNG BÌNH 4.3A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade pe…