Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.

Published: May 18, 2022
Updated: Nov 16, 2025
CVE: CVE-2022-30599
GHSA: GHSA-69c3-5xxf-58q2
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
moodle / moodle	3.9	3.9.14
moodle / moodle	4.0.0	4.0.0.x
redhat / enterprise_linux	8.0	8.0.x
fedoraproject / fedora	34	34.x
fedoraproject / fedora	35	35.x
fedoraproject / fedora	36	36.x
moodle / moodle	4.0	4.0.1
moodle / moodle	3.11	3.11.7
moodle / moodle	3.10	3.10.11
moodle / moodle	-	3.9.14

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime