CVE-2022-0983
Fixed upstream EPSS <1%
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.
Products: moodle, fedoraproject fedora, fedoraproject extra_packages_for_enterprise_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | moodle/moodle | 3.11.6 |
| Packagist | moodle/moodle | 3.10.10 |
| Packagist | moodle/moodle | 3.9.13 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | moodle | no fix |
| Ubuntu Pro 18.04 LTS | moodle | no fix |