Vulnerabilities > Moodle > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-03-26 CVE-2019-3850 Open Redirect vulnerability in Moodle
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17.
network
low complexity
moodle CWE-601
6.1
2019-03-26 CVE-2019-3848 Incorrect Authorization vulnerability in Moodle
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8.
network
low complexity
moodle CWE-863
4.3
2019-03-25 CVE-2019-3810 Cross-site Scripting vulnerability in Moodle
A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions.
network
low complexity
moodle CWE-79
6.1
2019-03-25 CVE-2019-3808 Cross-site Scripting vulnerability in Moodle
A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions.
network
low complexity
moodle CWE-79
5.4
2018-09-17 CVE-2018-14631 Cross-site Scripting vulnerability in Moodle
moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered.
network
low complexity
moodle CWE-79
6.1
2018-07-10 CVE-2018-10890 Information Exposure vulnerability in Moodle
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13.
network
low complexity
moodle CWE-200
5.3
2018-07-10 CVE-2018-10889 Information Exposure Through Log Files vulnerability in Moodle
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7.
network
low complexity
moodle CWE-532
5.3
2018-05-25 CVE-2018-1136 Cross-site Scripting vulnerability in Moodle
An issue was discovered in Moodle 3.x.
network
low complexity
moodle CWE-79
4.3
2018-05-25 CVE-2018-1135 Information Exposure vulnerability in Moodle
An issue was discovered in Moodle 3.x.
network
low complexity
moodle CWE-200
6.5
2018-05-25 CVE-2018-1134 Improper Privilege Management vulnerability in Moodle
An issue was discovered in Moodle 3.x.
network
low complexity
moodle CWE-269
6.5