Moodle Tackles LMS Security Vulnerabilities -- THE Journal

Learning Management Systems

Moodle Tackles LMS Security Vulnerabilities

By David Nagel
03/29/11

Moodle's developers have released an update to the popular open source learning management system. The latest Moodle 2.0.2 and 1.9.11 releases address several major security vulnerabilities and also include some bug fixes and performance enhancements.

Moodle 2.0.2 tackles seven security flaws from the 2.0.1 release that developers characterized as "major," including cross-site scripting vulnerabilities, a cross-site request forgery issue, and potential issues involving disclosure of information. The 1.9 branch update only addresses three vulnerabilities--two related to cross-site scripting and one related to potential information disclosure.

In addition to security fixes, Moodle 2.0.2 includes dozens of other fixes and improvements, including performance enhancements and fixes to various minor issues with wikis, SCORM, saving, course backup, and assessments.

Outside of security issues, version 1.9.11 included only five bug fixes. Those were in areas of Google Chrome support for Moodle's HTML editor, time in reports and logs exported to Excel, and a few other minor problems.

Moodle 2.0.2 and Moodle 1.9.11 are both available now as free downloads from the Moodle site. Further details on the 2.0.2 update can be found here. Details on the 1.9.11 update can be found here. Direct downloads are available here.

About the Author

David Nagel is the former editorial director of 1105 Media's Education Group and editor-in-chief of THE Journal, STEAM Universe, and Spaces4Learning. A 30-year publishing veteran, Nagel has led or contributed to dozens of technology, art, marketing, media, and business publications.

He can be reached at [email protected]. You can also connect with him on LinkedIn at https://www.linkedin.com/in/davidrnagel/ .

E-Mail this page

Printable Format

Featured

Partnership Brings AI Teaching Assistant to SchoolsPLP Course Library

SchoolsPLP, a provider of PreK-12 digital curriculum and learning solutions, has partnered with Agilix Labs to integrate the latter's BusyBee AI teaching assistant into its K-12 course library.
Report: Enterprises Are Embracing Agentic AI

According to a new report from SnapLogic, 50% of enterprises are already deploying AI agents, and another 32% plan to do so within the next 12 months..
K12TechPro Launches Cybersecurity Resource Center for K-12 Education

K12TechPro, a community for technology professionals in education, has introduced the K12TechPro Cybersecurity Hub, a collection of resources designed to bolster cybersecurity in K-12 education.
Senate Votes to Rescind E-Rate Program Funding Loaner WiFi Hotspots for Schools and Libraries

The Senate has passed a joint resolution to overturn "Addressing the Homework Gap Through the E-Rate Program," a July 2024 expansion to the FCC's E-Rate program that allowed schools and libraries to utilize E-Rate resources to loan out WiFi hotspots to students, school staff, and library patrons.