REDHAT-BUG-2128150: SQL Injection
First published: Tue Sep 20 2022(Updated: )
Severity/Risk: Minor Versions affected: 4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions Versions fixed: 4.0.4, 3.11.10 and 3.9.17 Reported by: Vincent CVE identifier: <a href="https://access.redhat.com/security/cve/CVE-2022-40315">CVE-2022-40315</a> Changes (master): <a href="http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75283">http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75283</a> Tracker issue: MDL-75283 Minor SQL injection risk in admin user browsing
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle | >=3.9<3.9.16>=3.11<3.11.9>=4.0<4.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2022-40315
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75283
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2128153
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2128155
- https://bugzilla.redhat.com/show_bug.cgi?id=2128150
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-40315
- agent/weakness
- agent/references
- agent/severity
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/moodle
- canonical/moodle