#moodle

0 stories this week · 0 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Maintainers will not fix a Moodle 3.9.2 upload bypass to RCE unless current LTS versions are affected.

Oss-security thread discusses a Moodle 3.9.2 authenticated file-upload validation bypass (CWE-434) enabling RCE under misconfiguration.

Poster questions a CVE for an authenticated Moodle 3.9.2 upload bypass that needs misconfiguration for RCE.

Researcher reports an authenticated Moodle 3.9.2 file-upload bypass that can yield RCE if misconfigured.

Ubuntu warned that an authenticated Moodle user could attempt SSRF and expose sensitive information.

Stories tagged #moodle