https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:04:57.045603+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-029 certfr-2019-avi-029 — De multiples vulnérabilités ont été découvertes dans Moodle . Elles permettent à un attaquant de provoquer un contourne… 2026-10-17T13:04:57.115646+00:00 certfr-2019-avi-029 https://cve.radiocsirt.org/vuln/cnvd-2019-35807 cnvd-2019-35807 2026-10-17T13:04:57.115687+00:00 cnvd-2019-35807 https://cve.radiocsirt.org/vuln/euvd-2026-49769 EUVD-2026-49769 2026-10-17T13:04:57.115703+00:00 EUVD-2026-49769 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3809 fkie_cve-2019-3809 2026-10-17T13:04:57.115714+00:00

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page.

 https://cve.radiocsirt.org/vuln/ghsa-jp4g-r8c9-3534 GHSA-jp4g-r8c9-3534 — Moodle Blind SSRF Risk in /badges/mybackpack.php 2026-10-17T13:04:57.115742+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page.

 https://cve.radiocsirt.org/vuln/gsd-2019-3809 gsd-2019-3809 2026-10-17T13:04:57.115765+00:00 gsd-2019-3809 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3809 UBUNTU-CVE-2019-3809 2026-10-17T13:04:57.115777+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page.