Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:52:22 +0000 CERTFR-2014-AVI-485 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 fkie_cve-2014-7832 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7832 <p>mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.</p> <p>mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2014-7832 GHSA-mphj-h2fc-62x3 — Moodle allows attackers to bypass the mod/lti:view capability requirement https://vulnerability.circl.lu/vuln/ghsa-mphj-h2fc-62x3 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.</p> https://vulnerability.circl.lu/vuln/ghsa-mphj-h2fc-62x3 gsd-2014-7832 https://vulnerability.circl.lu/vuln/gsd-2014-7832 gsd-2014-7832 https://vulnerability.circl.lu/vuln/gsd-2014-7832