moodle-block_configurablereports vulnerabilities
CVEs whose affected-version data names the moodle-block_configurablereports package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-113607Medium· 6.5Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data
Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block_configurable_reports_get_report_data web service. When check_p…
▾ Sunlitjleyva · moodle-block_configurablereportsvia CVEORG
CVE-2026-113608Medium· 5.3Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter_var
Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in report_sql::prepare_sql() via the filter_var request parameter of viewreport.php. Low-privileged users permi…
▾ Sunlitjleyva · moodle-block_configurablereportsvia CVEORG