话题列表。显示 100 /578个话题
状态 话题 发起人 最新帖子 回帖 动作
MSA-24-0006: IDOR on dashboard comments block
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-24-0005: CSRF risk in Language import utility
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-24-0004: Forum export did not respect activity group settings
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-24-0003: H5P attempts report did not respect activity group settings
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-24-0002: Forum search accepted random parameters in its URL
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-24-0001: Denial of service risk in file picker unzip functionality
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0053: Reflected XSS risk on ad-hoc tasks page
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0052: XSS risk when manually running a task in the admin UI
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0051: Badge recipients are available to all users
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0050: Survey responses did not respect group settings
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0049: Reflected XSS risk in grader report search
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0048: Stored XSS in grader report via user ID number
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0047: Logs and Live logs course reports did not respect activity group settings
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0046: Authenticated remote code execution risk in course blocks
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0045: DOS risk in URL downloader
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0044: Authenticated remote code execution risk in logstore as manager
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0043: Forum summary report shows students from other groups when in Separate Groups mode
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0042: RCE due to LFI risk in some misconfigured shared hosting environments
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0041: Insufficient capability checks when updating the parent of a course category
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0040: Make file serving endpoints revision control stricter
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0039: XSS risk when previewing data in course upload tool
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0038: Stored XSS in quiz grading report via user ID number
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0037: Auto-populated H5P author name causes a potential information leak
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0036: Stored XSS and potential IDOR risk in Wiki comments
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0035: Duplicating a BigBlueButton activity assigns the same meeting ID
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0034: Students could see other students in "Only see own membership" groups
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0033: XSS risk when using CSV grade import method
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0032: Authenticated remote code execution risk in IMSCP
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0031: Authenticated remote code execution risk in Lesson
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0030: Quiz sequential navigation bypass possible
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0029: Competency framework tools are not restricted as intended
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0028: Open redirect risk on admin view all policies page
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0027: JQuery UI library upgraded to 1.13.2 (upstream)
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0026: IDOR in message processor fragments allows fetching of other users' data
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0025: phpCAS library upgraded to 1.6.0 (upstream)
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0024: Private course participant data available from external grade report method
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0023: Stored self-XSS escalated to stored XSS via OAuth 2 login
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0022: SQL injection risk in grader report sorting
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0021: Some block permissions on Dashboard not respected
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0020: Remote code execution risk when parsing malformed file repository reference
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0019: Proxy bypass risk due to insufficient validation
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0018: SSRF risk due to insufficient check on the cURL blocked hosts list
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0017: Minor SQL injection risk on Mnet SSO access control page
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0016: XSS risk on groups page
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0015: Minor SQL injection risk in external Wiki method for listing pages
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0014: TinyMCE loaders susceptible to Arbitrary Folder Creation
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0013: XSS risk in TinyMCE alerts (upstream)
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0012: Course participation report shows roles the user should not see
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0011: Teacher can access names of users they do not have permission to access
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0010: CSRF risk in resetting all templates of a database activity
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0009: Users' name enumeration possible via IDOR on learning plans page
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0008: Pix helper potential Mustache code injection risk
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0007: Algebra filter XSS when filter is misconfigured
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0006: XSS risk when outputting database activity filter data
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0005: Authenticated arbitrary file read through malformed backup file
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0004: Authenticated SQL injection via availability check
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0003: Possible to set the preferred "start page" of other users
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0002: Reflected XSS risk in blog search
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-23-0001: Reflected XSS risk in some returnurl parameters
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0032: Blind SSRF risk in LTI provider library
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0031: Stored XSS possible in some "social" user profile fields
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0030: Reflected XSS risk in policy tool
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0029: Course restore - CSRF token passed in course redirect URL
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0028: Apply upstream security fix to VideoJS library to remove XSS risk
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0027: Quiz sequential navigation bypass using web services
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0026: No groups filtering in H5P activity attempts report
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0025: Minor SQL injection risk in admin user browsing
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0024: Remote code execution risk when restoring malformed backup file from Moodle 1.9
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0023: Stored XSS and page denial of service risks due to recursive rendering in Mustache ...
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0022: CSRF risk in enabling/disabling installed H5P libraries
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0021: Upgrade Mustache to latest version (upstream)
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0020: Upgrade moodle-mlbackend-python and update its reference in ...
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0019: LTI module reflected XSS risk - affecting unauthenticated users only
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0018: Open redirect risk in mobile auto-login feature
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0017: Stored XSS and blind SSRF possible via SCORM track details
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0016: Arbitrary file read when importing lesson questions
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0015: PostScript Code Injection / Remote code execution risk
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0014: Failed login attempts counted incorrectly
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0013: SQL injection risk in badge award criteria
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0012: Global search results reveal authors of content unexpectedly for some activities
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0011: Description field hidden by user policies (hiddenuserfields) is still visible
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0010: Stored XSS in assignment bulk marker allocation form via user ID number
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0009: Upgrade CKEditor included in h5p-editor-php-library to latest version (upstream)
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0008: Upgrade PHPMailer to latest version (upstream)
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0007: Possible to reach the profile field badge criteria on a course page
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0006: Users with moodle/site:uploadusers but without moodle/user:delete could delete users
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0005: SQL injection risk in Badges criteria code
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0004: CSRF risk in badge alignment deletion
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0003: Capability gradereport/user:view not always respected when navigating to a user's ...
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0002: calendar:manageentries capability allows CRUD access to all calendar events
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-22-0001: SQL injection risk in code fetching h5p activity user attempts
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0042: IDOR in a calendar web service allows fetching of other users' action events
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0041: CSRF risk on delete related badge feature
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0040: Reflected XSS in filetype admin tool
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0039: Upgrade moodle-mlbackend-python and update its reference in ...
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0038: Remote code execution risk when restoring malformed backup file
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0036: Quiz unreleased grade disclosure via web service
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0035: Arbitrary file read by site administrators via LaTeX preamble
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0034: Authentication bypass risk when using external database authentication
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0
MSA-21-0033: Course participants download did not restrict which users could be exported
Michael Hawkins的头像
Michael Hawkins
Michael Hawkins的头像
Michael Hawkins
 0