CVE-2023-35132
Moodle: minor sql injection risk on mnet sso access control page
Summary
Moodle: minor sql injection risk on mnet sso access control page
Original description
The description as published by the source.
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.22"},{"introduced":"3.11.0"},{"fixed":"3.11.15"},{"introduced":"4.0.0"},{"fixed":"4.0.9"},{"introduced":"4.1.0"},{"fixed":"4.1.4"},{"introduced":"4.2.0"},{"fixed":"4.2.1"}]}]
References
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org
- web git.moodle.org