PT-2022-5110 · Moodle+2 · Moodle+2

Vincent · Published 2020-11-08 · Updated 2025-05-20 · CVE-2022-40315

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moodle versions (affected versions not specified)

Description A limited SQL injection risk was identified in the "browse list of users" site administration page. The vulnerability is related to insufficient cleaning of user data on this page. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary SQL commands by sending a specially crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2020-3235

ALT-PU-2023-2012

ALT-PU-2023-2057

ALT-PU-2023-5127

BDU:2022-06359

BIT-MOODLE-2022-40315

CVE-2022-40315

GHSA-MQW9-3CJM-XWP3

Affected Products

Alt Linux

Moodle

Red Os

References · 19

• https://bdu.fstec.ru/vul/2022-06359 · Security Note
• https://osv.dev/vulnerability/BIT-moodle-2022-40315 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2128150 · Patch
• https://moodle.org/mod/forum/discuss.php?d=438394 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40315 · Security Note
• https://osv.dev/vulnerability/GHSA-mqw9-3cjm-xwp3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-40315 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-40315 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40315 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-40315 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-moodle-cve-2022-40316-cve-2022-40315-cve-2022-40314-cve-2022-40313-cve-20 · Note
• https://bodhi.fedoraproject.org/updates/FEDORA-2022-1c77803b43 · Note
• https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75283 · Note
• https://t.me/cibsecurity/50788 · Telegram Post