Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-40315

Fixed upstream EPSS 1%CVSS 9.8

A limited SQL injection risk was identified in the "browse list of users" site administration page.

Published 2022-09-30 · CVE record · OSV

Products: moodle, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle3.9.17
Packagistmoodle/moodle3.11.10
Packagistmoodle/moodle4.0.4

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix