by Kastro
Paper/Archive/CVE-2022-40315

CVE-2022-40315

fedora — A limited SQL injection risk was identified in the "browse list of users" site administration page.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 66.0.660 × 2013.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A limited SQL injection risk was identified in the "browse list of users" site administration page.

Affected

ProductAffectedFixed inSource
moodle4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmoodle.org/mod/forum/discuss.php?d=438394refbugzilla.redhat.com/show_bug.cgi?id=2128150