Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Moodle MSA-26-0044
Missing access checks on H5P content files
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0045
Upgrade TinyMCE and PrismJS including security fixes (upstream)
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Moodle MSA-26-0042
Blind SQL injection risk in profile availability condition check
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0043
Possible to bypass the login notification mechanism
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Moodle MSA-26-0032
User profile information disclosure via grade web service
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0033
Arbitrary class instantiation via audience classname in core_reportbuilder
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
0 of 1 credit line claimed Claim credit
-
Moodle MSA-26-0035
Manual enrolment does not correctly observe disabled state of plugin
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0036
Incorrect capability check in AI editor placement "generate image" service
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0037
Missing capability checks allow unauthorised triggering of grade penalty recalculation
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0038
Enrolling user to course while selecting group does not validate group belongs to that course
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0039
Minor XSS risk via password reset link
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0040
User list filters do not respect user profile field visibility
0 CVEs and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
0 of 1 credit line claimed Claim credit
-
Moodle MAPP-26-0001
Site plugin can read web service tokens from other stored sites
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Moodle MSA-26-0021
CSRF and XSS in grade item idnumber editing
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0022
CSRF risk in group messaging state toggle
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0023
CSRF risk when adding quiz section headings
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Moodle MSA-26-0024
Missing capability checks in AI placement web services
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
0 of 1 credit line claimed Claim credit
-
Moodle MSA-26-0026
Missing capability check in Assignment marker allocation
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
0 of 1 credit line claimed Claim credit
-
0 of 1 credit line claimed Claim credit
-
Moodle MSA-26-0029
Missing capability checks in report builder fragment callbacks
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit