CVE-2022-0983

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and ma...

Original description

The description as published by the source.

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.13"},{"introduced":"3.10.0"},{"fixed":"3.10.10"},{"introduced":"3.11.0"},{"fixed":"3.11.6"}]}]

References

advisory bugzilla.redhat.com
web lists.fedoraproject.org
web nvd.nist.gov