A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2214371 - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A72KX4WU6GK2CX4TKYFGFASPKOEOJFC/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5QAEAGJ44NVXLAJFJXKARKC45OGEDXT/ - | |
| References | () https://moodle.org/mod/forum/discuss.php?d=447830 - Patch, Vendor Advisory |
19 Apr 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Nov 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
30 Jun 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jun 2023, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://moodle.org/mod/forum/discuss.php?d=447830 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:moodle:moodle:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* |
|
| First Time |
Moodle moodle
Moodle |
|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
22 Jun 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-22 21:15
Updated : 2024-11-21 08:08
NVD link : CVE-2023-35132
Mitre link : CVE-2023-35132
CVE.ORG link : CVE-2023-35132
JSON object : View
Products Affected
moodle
- moodle
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')