critical9.8Public exploit code
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Moodle 3.11.4 - SQL Injection2022-02-02 · webapps · php
Impact
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 3.11.0 before 3.11.5 |