Known vulnerabilities in Moodle 3.5.0-beta - page 4

Vendor: moodle.org
Software: Moodle
Version: 3.5.0-beta
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 66
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Moodle version 3.5.0-beta Moodle 3.5.0-beta is affected by 66 vulnerabilities: 4 high, 26 medium, 36 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18063 - Server-Side Request Forgery (SSRF)
CVE-2019-6970
CWE-918 Medium
No
No
- 23.03.2019 SB2019032301
#VU31205 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14631
CWE-79 Low
No
No
3.5.2 17.09.2018 SB2018091708
#VU31206 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-14630
CWE-94 High
No
No
3.5.2 17.09.2018 SB2018091708
SB2018091721
SB2018091722
and 2 more
#VU31272 - Information Exposure Through Log Files
CVE-2018-10889
CWE-532 Medium
No
No
3.5.1 10.07.2018 SB2018071032
SB2018073052
SB2018073053
and 2 more
#VU31273 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10890
CWE-200 Medium
No
No
3.5.1 10.07.2018 SB2018071032
SB2018073052
SB2018073053
and 2 more
#VU31274 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-10891
CWE-74 Medium
No
No
3.5.1 10.07.2018 SB2018071032
SB2018073052
SB2018073053
and 2 more


Showing elements 61 - 80 out of 66