https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:16:50 +0000 https://cve.radiocsirt.org/vuln/bit-moodle-2025-67848 <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> <p><strong>Affected:</strong> Bitnami: moodle</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> https://cve.radiocsirt.org/vuln/bit-moodle-2025-67848 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-271048 EUVD-2026-271048 https://cve.radiocsirt.org/vuln/euvd-2026-271048 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67848 <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-67848 https://cve.radiocsirt.org/vuln/ghsa-j5jv-w5cw-j9ff <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> https://cve.radiocsirt.org/vuln/ghsa-j5jv-w5cw-j9ff https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67848 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle</p> <p>A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability (LTI) Provider. The issue arises from the LTI authentication handlers failing to enforce the user&#39;s suspension status, enabling unauthorized access to the system. This can lead to information disclosure or other unauthorized actions by users who should be restricted.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67848 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851 <p>Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um beliebigen Programmcode auszuführen, Benutzer auf bösartige Websites umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2851