Vulnerabilities > Moodle > Moodle > 3.9.24

DATE CVE VULNERABILITY TITLE RISK
2024-11-18 CVE-2024-48896 Information Exposure Through an Error Message vulnerability in Moodle
A vulnerability was found in Moodle.
network
low complexity
moodle CWE-209
4.3
2024-11-18 CVE-2024-48897 Incorrect Authorization vulnerability in Moodle
A vulnerability was found in Moodle.
network
low complexity
moodle CWE-863
4.3
2024-11-18 CVE-2024-48898 Missing Authorization vulnerability in Moodle
A vulnerability was found in Moodle.
network
low complexity
moodle CWE-862
4.3
2024-11-18 CVE-2024-48901 Incorrect Authorization vulnerability in Moodle
A vulnerability was found in Moodle.
network
low complexity
moodle CWE-863
4.3
2024-06-18 CVE-2024-38276 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
Incorrect CSRF token checks resulted in multiple CSRF risks.
network
low complexity
fedoraproject moodle CWE-352
8.8
2024-02-12 CVE-2024-1439 Unspecified vulnerability in Moodle
Inadequate access control in Moodle LMS.
local
low complexity
moodle
3.3
2021-01-28 CVE-2021-20183 Unspecified vulnerability in Moodle
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
network
low complexity
moodle
5.4