PT-2023-13770 · Moodle+1 · Moodle+1

Omaralbalouli · Published 2020-11-08 · Updated 2025-02-20 · CVE-2022-40208

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description The issue is related to insufficient limitations in some quiz web services, allowing students to bypass sequential navigation during a quiz attempt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

ALT-PU-2020-3235

ALT-PU-2023-2012

ALT-PU-2023-2057

ALT-PU-2023-5127

BIT-MOODLE-2022-40208

CVE-2022-40208

GHSA-948F-J464-RFJ2

Affected Products

Alt Linux

Moodle

References · 14

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-40208 · Vendor Advisory
• https://moodle.org/mod/forum/discuss.php?d=438761 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-40208 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40208 · Security Note
• https://osv.dev/vulnerability/BIT-moodle-2022-40208 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-948f-j464-rfj2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-40208 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/025e0297b65e6a8bd61efad0fdf36168c613f918 · Note
• https://t.me/cibsecurity/60676 · Telegram Post
• https://t.me/cvenotify/111920 · Telegram Post
• https://git.moodle.org/gw?p=moodle.git;a=commitdiff;h=025e0297b65e6a8bd61efad0fdf36168c613f918 · Note
• https://t.me/cvenotify/47158 · Telegram Post