https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:22:33.692211+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-648 certa-2013-avi-648 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-05T07:22:33.696092+00:00 certa-2013-avi-648 https://cve.radiocsirt.org/vuln/euvd-2026-107597 EUVD-2026-107597 2026-10-05T07:22:33.696130+00:00 EUVD-2026-107597 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4522 fkie_cve-2013-4522 2026-10-05T07:22:33.696145+00:00

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.

 https://cve.radiocsirt.org/vuln/ghsa-vm9c-39jx-q45w GHSA-vm9c-39jx-q45w — Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor 2026-10-05T07:22:33.696174+00:00

Affected: Packagist: moodle/moodle

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.

 https://cve.radiocsirt.org/vuln/gsd-2013-4522 gsd-2013-4522 2026-10-05T07:22:33.696200+00:00 gsd-2013-4522 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4522 Withdrawn: UBUNTU-CVE-2013-4522 2026-10-05T07:22:33.696212+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: moodle

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.