Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-35132

A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

Published

2023-06-22T21:15:09.470

Last Modified

2024-11-21T08:08:00.023

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-89
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 3.9.22 Yes
Application moodle moodle < 3.11.15 Yes
Application moodle moodle < 4.0.9 Yes
Application moodle moodle < 4.1.4 Yes
Application moodle moodle 4.2.0 Yes
References