Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2023-35132

A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
Composer icon moodle / moodle 4.2.0 4.2.0.x
Composer icon moodle / moodle 4.2.0 4.2.1
Composer icon moodle / moodle 4.1.0 4.1.4
Composer icon moodle / moodle 4.0.0 4.0.9
Composer icon moodle / moodle 3.10.0 3.11.15
Composer icon moodle / moodle - 3.9.22
moodle / moodle 4.2.0 4.2.0.x
moodle / moodle 4.1.0 4.1.4
moodle / moodle 4.0.0 4.0.9
moodle / moodle 3.11.0 3.11.15
moodle / moodle - 3.9.22