https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:21:24.589511+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-029 certfr-2019-avi-029 — De multiples vulnérabilités ont été découvertes dans Moodle . Elles permettent à un attaquant de provoquer un contourne… 2026-10-17T13:21:24.734340+00:00 certfr-2019-avi-029 https://cve.radiocsirt.org/vuln/euvd-2026-49722 EUVD-2026-49722 2026-10-17T13:21:24.734399+00:00 EUVD-2026-49722 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3808 fkie_cve-2019-3808 2026-10-17T13:21:24.734425+00:00

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.

 https://cve.radiocsirt.org/vuln/ghsa-4r2p-wpv5-683w GHSA-4r2p-wpv5-683w — Moodle XSS Vulnerability 2026-10-17T13:21:24.734468+00:00

Affected: Packagist: moodle/moodle

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.

 https://cve.radiocsirt.org/vuln/gsd-2019-3808 gsd-2019-3808 2026-10-17T13:21:24.734508+00:00 gsd-2019-3808 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3808 UBUNTU-CVE-2019-3808 2026-10-17T13:21:24.734527+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.