Known vulnerabilities in Moodle 3.5.0-beta
Vendor:
moodle.org
Software:
Moodle
Version:
3.5.0-beta
Software CPE:
cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Total vulnerabilities:
66
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
5.2.2
5.1.6
5.0.9
4.5.13
5.2.1
5.1.5
5.0.8
4.5.12
5.2.0
5.1.4
5.0.7
4.5.11
5.1.3
5.0.6
4.5.10
5.1.2
5.0.5
4.5.9
5.1.1
5.0.4
4.5.8
4.4.12
4.1.22
5.1.0
5.0.3
4.5.7
4.4.11
4.1.21
5.0.2
4.5.6
4.4.10
4.1.20
5.0.1
4.5.5
4.4.9
4.1.19
5.0.0
4.5.4
4.4.8
4.3.12
4.1.18
4.5.3
4.4.7
4.3.11
4.1.17
4.5.2
4.4.6
4.3.10
4.1.16
4.5.1
4.4.5
4.3.9
4.1.15
4.5.0
4.4.4
4.3.8
4.2.11
4.1.14
4.4.3
4.3.7
4.2.10
4.1.13
4.4.2
4.3.6
4.2.9
4.1.12
4.4.1
4.3.5
4.2.8
4.1.11
4.4.0
4.3.4
4.2.7
4.1.10
4.3.3
4.2.6
4.1.9
4.3.2
4.2.5
4.1.8
4.3.1
4.2.4
4.1.7
4.0.12
3.11.18
3.9.25
4.3.0
4.2.3
4.1.6
4.0.11
3.11.17
3.9.24
4.2.2
4.1.5
4.0.10
3.11.16
3.9.23
4.2.1
4.1.4
4.0.9
3.11.15
3.9.22
4.2.0
4.1.3
4.0.8
3.11.14
3.9.21
4.1.2
4.0.7
3.11.13
3.9.20
4.1.1
4.0.6
3.11.12
3.9.19
4.1.0
4.0.5
3.11.11
3.9.18
4.0.4
3.11.10
3.9.17
4.0.3
3.11.9
3.9.16
4.0.2
3.11.8
3.9.15
4.0.1
3.11.7
3.10.11
3.9.14
4.0.0
3.11.6
3.10.10
3.9.13
3.11.5
3.10.9
3.9.12
3.11.4
3.10.8
3.9.11
3.9.10
3.10.7
3.11.3
3.9.9
3.10.6
3.11.2
3.9.8
3.10.5
3.11.1
3.11
3.11.0
3.5.18
3.8.9
3.9.7
3.10.4
3.9.6
3.10.3
3.5.17
3.8.8
3.9.5
3.10.2
3.5.16
3.8.7
3.9.4
3.10.1
3.5.15
3.7.9
3.8.6
3.9.3
3.10.0
1.4.001
1.2.106-2
1.0
3.5.14
3.7.8
3.8.5
3.9.2
18
17
23
22
3.3
3.5.13
3.7.7
3.8.4
3.9.1
3.9.0
3.5.12
3.6.10
3.7.6
3.8.3
3.5.11
3.6.9
3.7.5
3.8.2
3.5.10
3.6.8
3.7.4
3.8.1
3.5.9
3.6.7
3.7.3
3.8.0-beta
3.8.0-rc1
3.8.0
3.5.8
3.6.6
3.7.2
3.5.7
3.6.5
3.7.1
3.1.18
3.4.9
3.5.6
3.6.4
3.7.0-beta
3.7.0-rc1
3.7.0-rc2
3.7.0
3.6.0-rc3
3.6.0-rc2
3.6.0-rc1
3.6.0-beta
3.5.0-rc1
3.5.0-beta
3.4.0-rc3
3.4.0-rc2
3.4.0-rc1
3.4.0-beta
3.3.0-rc3
3.3.0-rc2
3.3.0-rc1
3.3.0-beta
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0-rc5
3.2.0-rc4
3.2.0-rc3
3.2.0-rc2
3.2.0-rc1
3.2.0-beta
3.2.0
3.1.0-rc2
3.1.0-rc1
3.1.0-beta
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.0-rc4
3.0.0-rc3
3.0.0-rc2
3.0.0-rc1
3.0.0-beta
3.0.0
2.9.9
2.9.8
2.9.7
2.9.6
2.9.5
2.9.0-rc2
2.9.0-rc1
2.9.0-beta
2.9.0
2.8.12
2.8.11
2.8.0-rc2
2.8.0-rc1
2.8.0-beta
2.8.0
2.7.20
2.7.19
2.7.18
2.7.17
2.7.16
2.7.15
2.7.14
2.7.13
2.7.0-rc2
2.7.0-rc1
2.7.0-beta
2.7.0
2.6.0-rc1
2.6.0-beta
2.6.0
2.5.0-rc1
2.5.0-beta
2.5.0
2.4.0-rc1
2.4.0-beta
2.4.0
2.3.0-rc1
2.3.0-beta
2.3.0
2.2.0-rc1
2.2.0-beta
2.2.0
2.1.0
2.0.10
2.0.0-rc2
2.0.0-rc1
2.0.0
1.9.0
1.8.0
1.7.7
1.7.0
1.6.9
1.6.0
1.5.4
1.5.0
1.4.0
1.3.5
1.3.0
1.2.0
1.1.0
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
3.6.3
3.5.5
3.1.17
3.6.2
3.6.1
3.5.4
3.1.16
3.3.8
3.3.7
3.3.6
3.3.5
3.1.14
3.1.13
3.1.12
3.1.11
3.1.10
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.4.8
3.4.7
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.5.2
3.5.1
3.5.0
3.1.15
3.3.9
3.4.6
3.5.3
3.6.0
2.8.10
2.9.4
3.0.2
2.7.12
3.0
2.8.9
2.9.3
3.0.1
2.7.11
2.7.10
2.8.8
2.9.2
2.6.11
2.9.1
2.8.7
2.7.9
2.9
2.7.8
2.8.6
2.6.10
2.8.5
2.7.6
2.8.4
2.6.9
2.7.7
2.7.5
2.8.3
2.6.7
2.7.4
2.8.2
2.6.8
2.8.1
2.6.6
2.7.3
2.8
2.5.9
2.7.2
2.5.8
2.6.5
2.6.4
2.7.1
2.4.11
2.5.7
2.6.3
2.4.10
2.7
2.5.6
2.6.2
2.4.9
2.5.5
2.6.1
2.6
2.4.8
2.4.7
2.3.10
2.3.11
2.5.4
2.5.3
2.4.6
2.3.9
2.5.2
1.9.19
1.8.14
1.8.13
2.1.10
2.1.9
2.4
2.2.10
2.3.3
2.4.2
2.5.1
2.2.7
2.3.6
2.4.5
2.2.6
2.3.5
2.4.4
2.2.11
2.4.1
2.3.4
2.4.3
2.2.8
2.3.7
2.2.9
2.3.8
2.5
2.1.8
2.3.2
2.2.5
2.1.7
2.2.4
2.3.1
1.9.18
2.0.9
2.1.6
2.2.3
2.3
1.9.16
1.9.17
2.0.8
2.0.7
2.2.1
2.1.5
2.1.4
2.2.2
2.0.6
2.1.3
1.9.15
2.0.5
2.0.4
2.1.2
2.0.3
2.1.1
2.0.2
2.2
2.0
2.1
1.9.12
1.9.11
1.9.14
1.9.13
1.9.9
1.9.10
2.0.1
1.8.12
1.9.8
1.9.7
1.8.11
1.8.9
1.8.10
1.9.6
1.9.5
1.9.4
1.8.8
1.6.8
1.9.3
1.8.7
1.9
1.9.1
1.8.5
1.9.2
1.8.6
1.7
1.8
1.8.1
1.6.3
1.7.2
1.6.4
1.7.3
1.8.2
1.6.6
1.7.5
1.8.4
1.6.7
1.7.6
1.6.5
1.7.4
1.8.3
1.7.1
1.6.2
1.6
1.5.1
1.6.1
1.5.3
1.5.2
1.5
1.5 beta
1.4.5
1.4.3
1.4.4
1.3.4
1.4.1
1.4.2
1.3.3
1.3
1.3.2
1.2
1.2.1
1.3.1
1.1.1
Vulnerabilities (66)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82196 - Exposure of sensitive information to an unauthorized actor CVE-2023-5551 |
CWE-200 | Low | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82195 - Improper Control of Generation of Code ('Code Injection') CVE-2023-5550 |
CWE-94 | Medium | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82194 - Improper Access Control CVE-2023-5549 |
CWE-284 | Low | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82193 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2023-5548 |
CWE-349 | Medium | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82190 - Exposure of sensitive information to an unauthorized actor CVE-2023-5545 |
CWE-200 | Medium | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82188 - Improper Control of Generation of Code ('Code Injection') CVE-2023-5539 |
CWE-94 | Medium | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82185 - Improper Control of Generation of Code ('Code Injection') CVE-2023-5540 |
CWE-94 | Medium | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82183 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-5541 |
CWE-79 | Low | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-5544 |
CWE-79 | Low | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU82179 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-5547 |
CWE-79 | Low | 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 | 18.10.2023 |
SB2023101832 |
||
| #VU79835 - Improper Access Control CVE-2023-40325 |
CWE-284 | Low | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79834 - Improper Access Control CVE-2023-40324 |
CWE-284 | Low | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79833 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-40323 |
CWE-601 | Low | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79832 - Improper Access Control CVE-2023-40322 |
CWE-284 | Low | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79830 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40320 |
CWE-79 | Low | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79828 - Improper Access Control CVE-2023-40318 |
CWE-284 | Low | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79827 - Improper input validation CVE-2023-40317 |
CWE-20 | High | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU79826 - Improper input validation CVE-2023-40316 |
CWE-20 | Medium | 3.9.23, 3.11.16, 4.0.10, 4.1.5, 4.2.2 | 22.08.2023 |
SB2023082226 |
||
| #VU72486 - Improper Access Control CVE-2022-39369 |
CWE-284 | Medium | 3.9.23, 3.11.16, 4.0.10 | 22.02.2023 |
SB2023022209 SB2023082225 SB2024072502 and 5 more |
||
| #VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41182 |
CWE-79 | Medium | 3.9.23, 3.11.16 | 20.11.2021 |
SB2021112002 SB2022011944 SB2022011946 and 32 more |
Showing elements 1 - 20 out of 66