CVE-2022-0332CWE-89

CVE-2022-0332: vulnerability in moodle

Published · Updated

Follow this CVE+ Monitor moodle+ Monitor moodle/moodle

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

37Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 32%
from disclosure to weaponsame day
Published on NVDJan 25
1st PoCJan 25
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
Affected products
n/a · moodle
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.