~ / search / GHSA-mqw9-3cjm-xwp3

GHSA-mqw9-3cjm-xwp3

Moodle Minor SQL injection risk in admin user browsing

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-40315

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.9, < 3.9.17 3.9.17
Packagist moodle/moodle >= 3.11, < 3.11.10 3.11.10
Packagist moodle/moodle >= 4.0, < 4.0.4 4.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

A limited SQL injection risk was identified in the "browse list of users" site administration page.

References

External links from the advisory. They lead to third-party sites.