GHSA-6jhm-4vmx-mr76
SQL injection in Moodle
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | moodle/moodle | >= 3.11, < 3.11.5 | 3.11.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
References
External links from the advisory. They lead to third-party sites.