https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T14:24:28.965109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10920 bdu:2015-10920 2026-10-25T14:24:28.969520+00:00 bdu:2015-10920 https://cve.radiocsirt.org/vuln/certfr-2015-avi-115 certfr-2015-avi-115 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-25T14:24:28.969551+00:00 certfr-2015-avi-115 https://cve.radiocsirt.org/vuln/cnvd-2015-03635 cnvd-2015-03635 2026-10-25T14:24:28.969571+00:00 cnvd-2015-03635 https://cve.radiocsirt.org/vuln/euvd-2026-90871 EUVD-2026-90871 2026-10-25T14:24:28.969584+00:00 EUVD-2026-90871 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2267 fkie_cve-2015-2267 2026-10-25T14:24:28.969595+00:00

mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.

 https://cve.radiocsirt.org/vuln/ghsa-cm4r-58pj-h2ph GHSA-cm4r-58pj-h2ph — Moodle allows attackers to extract archives to arbitrary directories 2026-10-25T14:24:28.969620+00:00

Affected: Packagist: moodle/moodle

mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.

 https://cve.radiocsirt.org/vuln/gsd-2015-2267 gsd-2015-2267 2026-10-25T14:24:28.969644+00:00 gsd-2015-2267 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2267 Withdrawn: UBUNTU-CVE-2015-2267 2026-10-25T14:24:28.969655+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.