NIXPKGS-2026-0041
published on 18 Jan 2026
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package moodle-dl
- @LeSuisse removed maintainer @freezeboy
- @LeSuisse accepted
- @LeSuisse published on GitHub
Moodle: password brute force risk when mobile/web services enabled
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.
Affected products
moodle
- <4.1.21
- <4.5.7
- <4.4.11
- <5.0.3
Package maintainers
Ignored maintainers (1)
-
@freezeboy freezeboy