https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:25:18.413591+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-150 certfr-2018-avi-150 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer un contournem… 2026-10-18T21:25:18.481302+00:00 certfr-2018-avi-150 https://cve.radiocsirt.org/vuln/euvd-2026-170768 EUVD-2026-170768 2026-10-18T21:25:18.481345+00:00 EUVD-2026-170768 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1081 fkie_cve-2018-1081 2026-10-18T21:25:18.481360+00:00

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.

 https://cve.radiocsirt.org/vuln/ghsa-v9xq-vh72-chr4 GHSA-v9xq-vh72-chr4 — Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script 2026-10-18T21:25:18.481390+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.

 https://cve.radiocsirt.org/vuln/gsd-2018-1081 gsd-2018-1081 2026-10-18T21:25:18.481417+00:00 gsd-2018-1081 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1081 UBUNTU-CVE-2018-1081 2026-10-18T21:25:18.481429+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.