Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2508-35746
MSA-25-0033: Course visibility not honoured consistently
Moodle
08-08-2025
CCN-CERT-2508-35747
MSA-25-0032: SSRF risk via DNS rebind
Moodle
08-08-2025
CCN-CERT-2508-35748
MSA-25-0031: Upgrade ADOdb including security fix (upstream)
Moodle
08-08-2025
CCN-CERT-2508-35749
MSA-25-0030: Password can be revealed in login page after log out due to caching
Moodle
08-08-2025
CCN-CERT-2508-35750
MSA-25-0029: XSS risk in MathJax (safe extension not loaded)
Moodle
08-08-2025
CCN-CERT-2508-35751
MSA-25-0028: IDOR when accessing the cohorts report
Moodle
08-08-2025
CCN-CERT-2508-35752
MSA-25-0027: IDOR in messaging web service allows access to some user details
Moodle
08-08-2025
CCN-CERT-2508-35753
MSA-25-0026: AJAX section delete does not respect course_can_delete_section()
Moodle
08-08-2025
CCN-CERT-2508-35754
MSA-25-0025: Reflected XSS risk in policy tool
Moodle
08-08-2025
CCN-CERT-2508-35755
MSA-25-0024: Authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Moodle
08-08-2025
CCN-CERT-2508-35756
MSA-25-0023: Authenticated remote code execution risk in the Moodle LMS Dropbox repository
Moodle
08-08-2025
CCN-CERT-2508-35757
MSA-25-0022: IDOR in web service allows users enrolled in a course to access some details of other...
Moodle
08-08-2025
CCN-CERT-2508-35758
MSA-25-0021: CSRF risk in Brickfield tools analysis request action
Moodle
08-08-2025
CCN-CERT-2508-35759
MSA-25-0020: mod_data edit/delete pages pass CSRF token in GET parameter
Moodle
08-08-2025
CCN-CERT-2508-35760
MSA-25-0019: IDOR in RSS block allows access to additional RSS feeds
Moodle
08-08-2025
CCN-CERT-2508-35761
MSA-25-0018: CSRF risk in user tours manager allows tour duplication
Moodle
08-08-2025
CCN-CERT-2508-35762
MSA-25-0017: Self enrolment available before completing second factor with MFA enabled
Moodle
08-08-2025
CCN-CERT-2508-44668
CVE-2025-48913
APACHE
08-08-2025
CCN-CERT-2508-44669
CVE-2025-53606
APACHE
08-08-2025
CCN-CERT-2508-44694
CVE-2025-36023
IBM
08-08-2025

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI