CVE-2025-26533: falha de alta gravidade em moodle
SQL injection risk in course search module list filter
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 0.6%
An SQL injection risk was identified in the module list filter within course search.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Moodle Project · moodleCVEs relacionadas — moodle
No mesmo produto, das mais perigosas para as menos.
CVE-2025-26529HIGHStored XSS risk in admin live logEPSS 0.5%CVE-2025-26525HIGHArbitrary file read risk through pdfTeXEPSS 0.4%CVE-2026-119553HIGHMoodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path TraversalEPSS 0.4%CVE-2025-26527MEDIUMNon-searchable tags can still be discovered on the tag search page and in the tags blockEPSS 0.4%CVE-2025-26530HIGHReflected XSS via question bank filterEPSS 0.4%CVE-2025-26526MEDIUMFeedback response viewing and deletions did not respect Separate Groups modeEPSS 0.3%