Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2023-35132

A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
moodle / moodle 4.2.0 4.2.0.x
moodle / moodle 4.2.0 4.2.1
moodle / moodle 4.1.0 4.1.4
moodle / moodle 4.0.0 4.0.9
moodle / moodle 3.10.0 3.11.15
moodle / moodle - 3.9.22
moodle / moodle 4.2.0 4.2.0.x
moodle / moodle 4.1.0 4.1.4
moodle / moodle 4.0.0 4.0.9
moodle / moodle 3.11.0 3.11.15
moodle / moodle - 3.9.22