Most recent entries from all

bdu:2025-10851

BIT-moodle-2024-43438 — Moodle: idor in feedback non-respondents report allows messaging arbitrary site users

Affected: Bitnami: moodle

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.

certfr-2024-avi-0696 — De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provo…

certfr-2024-avi-0696

EUVD-2026-199930

fkie_cve-2024-43438

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.

GHSA-p9cx-f595-h79h — Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users

Affected: Packagist: moodle/moodle

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.

UBUNTU-CVE-2024-43438

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.

WID-SEC-W-2024-1877 — Moodle: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Code auszuführen, bestimmte administrative Aufgaben durchzuführen, Informationen preiszugeben, Daten zu manipulieren, Sicherheitsmechanismen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und eine nicht näher spezifizierte Wirkung zu erzielen.