Resum de les últimes 20 vulnerabilitats


Ayuda Ajuda

Identificador
Títol
Fabricant
Data

CCN-CERT-2508-35743
MSA-25-0036: IDOR allows fetching of recently accessed courses for other users via web service
Moodle
08-08-2025
CCN-CERT-2508-35744
MSA-25-0035: Missing authorisation checks in BigBlueButton view page
Moodle
08-08-2025
CCN-CERT-2508-35745
MSA-25-0034: CSRF risk in badges backpack management
Moodle
08-08-2025
CCN-CERT-2508-35746
MSA-25-0033: Course visibility not honoured consistently
Moodle
08-08-2025
CCN-CERT-2508-35747
MSA-25-0032: SSRF risk via DNS rebind
Moodle
08-08-2025
CCN-CERT-2508-35748
MSA-25-0031: Upgrade ADOdb including security fix (upstream)
Moodle
08-08-2025
CCN-CERT-2508-35749
MSA-25-0030: Password can be revealed in login page after log out due to caching
Moodle
08-08-2025
CCN-CERT-2508-35750
MSA-25-0029: XSS risk in MathJax (safe extension not loaded)
Moodle
08-08-2025
CCN-CERT-2508-35751
MSA-25-0028: IDOR when accessing the cohorts report
Moodle
08-08-2025
CCN-CERT-2508-35752
MSA-25-0027: IDOR in messaging web service allows access to some user details
Moodle
08-08-2025
CCN-CERT-2508-35753
MSA-25-0026: AJAX section delete does not respect course_can_delete_section()
Moodle
08-08-2025
CCN-CERT-2508-35754
MSA-25-0025: Reflected XSS risk in policy tool
Moodle
08-08-2025
CCN-CERT-2508-35755
MSA-25-0024: Authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Moodle
08-08-2025
CCN-CERT-2508-35756
MSA-25-0023: Authenticated remote code execution risk in the Moodle LMS Dropbox repository
Moodle
08-08-2025
CCN-CERT-2508-35757
MSA-25-0022: IDOR in web service allows users enrolled in a course to access some details of other...
Moodle
08-08-2025
CCN-CERT-2508-35758
MSA-25-0021: CSRF risk in Brickfield tools analysis request action
Moodle
08-08-2025
CCN-CERT-2508-35759
MSA-25-0020: mod_data edit/delete pages pass CSRF token in GET parameter
Moodle
08-08-2025
CCN-CERT-2508-35760
MSA-25-0019: IDOR in RSS block allows access to additional RSS feeds
Moodle
08-08-2025
CCN-CERT-2508-35761
MSA-25-0018: CSRF risk in user tours manager allows tour duplication
Moodle
08-08-2025
CCN-CERT-2508-35762
MSA-25-0017: Self enrolment available before completing second factor with MFA enabled
Moodle
08-08-2025
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI