critical9.8
CVE-2022-40315
Moodle Minor SQL injection risk in admin user browsing
Impact
A limited SQL injection risk was identified in the "browse list of users" site administration page.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | >= 3.9, < 3.9.17 | 3.9.17 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | from 3.9.0 before 3.9.17 from 3.11.0 before 3.11.10 from 4.0.0 before 4.0.4 |
| Fedoraproject | Extra Packages For Enterprise Linux | Version 8.0 |
| Fedoraproject | Fedora | Versions 35, 36 |