Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-35132

Moodle: minor sql injection risk on mnet sso access control page

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.2.0 to < 4.2.1affected
  • 4.1.0 to < 4.1.4affected
  • 4.0.0 to < 4.0.9affected
  • 3.11.0 to < 3.11.15affected
  • 0 to < 3.9.22affected

References