CRITICAL🇵🇱 Wersja polska

CVE-2021-36392

CVSS 9.8v3.1pub. 2023-03-06upd. 2024-11-21

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Moodle

    APP
    Moodle
    < 3.9.83.10.0 – 3.10.5 (excl.)3.11.0 – 3.11.1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2024-33999CRITICAL9.8PL ✓same product

Moodle MFA — niewystarczająca sanityzacja URL referrer

CVE-2023-28333CRITICAL9.8PL ✓same product

Moodle: potencjalny Mustache injection w pomocniku Mustache pix

CVE-2021-36393CRITICAL9.8PL ✓same product

SQL injection w bibliotece pobierania ostatnich kursów użytkownika w Moodle

CVE-2021-36394CRITICAL9.8PL ✓same product

RCE w pluginie uwierzytelniania Shibboleth w Moodle

CVE-2022-45152CRITICAL9.1PL ✓same product

Blind SSRF w bibliotece LTI provider platformy Moodle