https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:01:02.033895+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-moodle-2023-28335 BIT-moodle-2023-28335 — Moodle: csrf risk in resetting all templates of a database activity 2026-10-03T15:01:02.117217+00:00

Affected: Bitnami: moodle

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0246 certfr-2023-avi-0246 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-03T15:01:02.117272+00:00 certfr-2023-avi-0246 https://cve.radiocsirt.org/vuln/euvd-2026-8351 EUVD-2026-8351 2026-10-03T15:01:02.117294+00:00 EUVD-2026-8351 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28335 fkie_cve-2023-28335 2026-10-03T15:01:02.117307+00:00

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

 https://cve.radiocsirt.org/vuln/ghsa-wxmq-v9gx-75pg GHSA-wxmq-v9gx-75pg — Moodle vulnerable to Cross-site Request Forgery 2026-10-03T15:01:02.117329+00:00

Affected: Packagist: moodle/moodle

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

 https://cve.radiocsirt.org/vuln/gsd-2023-28335 gsd-2023-28335 2026-10-03T15:01:02.117348+00:00 gsd-2023-28335 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28335 UBUNTU-CVE-2023-28335 2026-10-03T15:01:02.117359+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0696 WID-SEC-W-2023-0696 — Moodle: Mehrere Schwachstellen 2026-10-03T15:01:02.117378+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.