by Kastro
Paper/Archive/CVE-2022-0332

CVE-2022-0332

fedora — A flaw was found in Moodle in versions 3.11 to 3.11.4.

EPSS 44%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.8.988 × 2019.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

Affected

ProductAffectedFixed inSource
moodlemoodle 3.11.5–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refbugzilla.redhat.com/show_bug.cgi?id=2043661refmoodle.org/mod/forum/discuss.php?d=431099