Sec Feed Reader

Moodle Security Announcements

Uebersicht

Quellen-ID (source_id): moodle
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: vendor_advisory
Provider: moodle
Sprache: de
Zielgruppe: —
Tags: cms
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:18 UTC	2026-07-28 00:50 UTC	1745	HTTP 403 for https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml	-	Mon, 29 Jun 2026 14:05:13 GMT

Fetch-Fehler

Die letzte Abholung von diesem Feed ist fehlgeschlagen. Details: HTTP 403 for https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml

Letzte Eintraege

39 Eintraege · 50 pro Seite · Seite 1 von 1

Veroeffentlicht	Titel	CVEs	Severity
2026-06-22 15:49	MSA-26-0029: Missing capability checks in report builder fragment callbacks	—	-
2026-06-22 15:42	MSA-26-0028: DoS risk via user profile description	—	-
2026-06-22 15:42	MSA-26-0027: Blind SSRF risk in MNet peers function	—	-
2026-06-22 13:51	MSA-26-0026: Missing capability check in Assignment marker allocation	—	-
2026-06-22 13:50	MSA-26-0025: CSRF risk in quiz attempt regrading	—	-
2026-06-22 13:49	MSA-26-0024: Missing capability checks in AI placement web services	—	-
2026-06-22 13:49	MSA-26-0023: CSRF risk when adding quiz section headings	—	-
2026-06-22 13:48	MSA-26-0022: CSRF risk in group messaging state toggle	—	-
2026-06-22 12:32	MSA-26-0021: CSRF and XSS in grade item idnumber editing	—	-
2026-06-22 12:32	MSA-26-0020: Reflected XSS via Feedback import error message	—	-
2026-06-22 12:31	MSA-26-0019: CSRF risk in user profile page reset	—	-
2026-06-22 12:31	MSA-26-0018: CSRF risk in user homepage preference setting	—	-
2026-06-22 12:30	MSA-26-0017: IDOR allows arbitrary comment deletion	—	-
2026-06-22 11:21	MSA-26-0016: Missing group access checks in grade web services	—	-
2026-06-22 11:20	MSA-26-0015: RCE risk via admin presets import	—	-
2026-06-22 11:20	MSA-26-0014: Arbitrary file read risk in backup restore	—	-
2026-06-22 11:19	MSA-26-0013: Email-based MFA bypass	—	-
2026-06-22 11:18	MSA-26-0012: Arbitrary file read risk in Database activity module	—	-
2026-06-08 12:28	Socialwall course format plugin - known vulnerability and call for new maintainer	—	-
2026-04-28 19:53	MSA-26-0011: CSRF and missing capability check in admin/mnet/peers.php	CVE-2026-7278	-
2026-04-28 19:51	MSA-26-0010: Upgrade AWS SDK for PHP including security fix (upstream)	CVE-2025-14761	MEDIUM
2026-04-28 19:06	MSA-26-0009: CSRF risk in reset penalty rules functionality	CVE-2026-7277	-
2026-04-28 19:06	MSA-26-0008: Upgrade PHPUnit version to avoid a security risk (upstream)	CVE-2026-24765	HIGH
2026-04-28 19:05	MSA-26-0007: Message panel breaks with messages from deleted users (messaging DoS risk)	CVE-2026-7276	-
2026-04-28 19:04	MSA-26-0006: RCE risk via Moodle's Google Drive repository plugin	CVE-2026-7275	-
2026-04-28 19:02	MSA-26-0005: SQL injection risk in external database authentication plugin	CVE-2026-7274	-
2026-02-17 10:33	MSA-26-0004: Update Symfony process module version to avoid a security risk (upstream)	CVE-2024-51736	LOW
2026-02-17 10:32	MSA-26-0003: Denial of service risk in TeX formula editor	CVE-2026-26047	MEDIUM
2026-02-17 10:30	MSA-26-0002: Remote code execution risk in TeX filter admin setting	CVE-2026-26046	HIGH
2026-02-17 10:29	MSA-26-0001: Remote code execution risk via file restore	CVE-2026-26045	HIGH
2025-12-15 12:23	MSA-25-0061: User IDs exposed in URLs when using anonymous submissions in assignment	CVE-2025-67857	MEDIUM
2025-12-15 12:23	MSA-25-0060: Badges with a role criterion could be awarded to users who do not hold the role	CVE-2025-67856	MEDIUM
2025-12-15 12:23	MSA-25-0059: Reflected XSS risk in policy tool	CVE-2025-67855	MEDIUM
2025-12-15 12:22	MSA-25-0058: Participants can access forum ratings without permission	CVE-2025-67854	-
2025-12-15 12:22	MSA-25-0057: Password brute force risk from confirmation email web service	CVE-2025-67853	HIGH
2025-12-15 12:21	MSA-25-0056: Open redirect in OAuth login	CVE-2025-67852	LOW
2025-12-15 12:21	MSA-25-0055: Formula injection risk when exporting data to CSV / Excel	CVE-2025-67851	MEDIUM
2025-12-15 12:20	MSA-25-0054: XSS risk in formula editor	CVE-2025-67850	HIGH
2025-12-15 12:19	MSA-25-0053: XSS risk via AI prompt injection	CVE-2025-67849	HIGH

Alle Quellen