https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T17:52:22.681414+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-04T17:52:22.686515+00:00 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7832 fkie_cve-2014-7832 2026-10-04T17:52:22.686608+00:00

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.

 https://vulnerability.circl.lu/vuln/ghsa-mphj-h2fc-62x3 GHSA-mphj-h2fc-62x3 — Moodle allows attackers to bypass the mod/lti:view capability requirement 2026-10-04T17:52:22.686669+00:00

Affected: Packagist: moodle/moodle

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.

 https://vulnerability.circl.lu/vuln/gsd-2014-7832 gsd-2014-7832 2026-10-04T17:52:22.686718+00:00 gsd-2014-7832