CVE-2022-0332
Description
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
CWE
- CWE-89 — CWE-89
Affected
- n/a / moodle — v=moodle 3.11.5 [affected]
CVSS
- (none)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2043661 x_refsource_MISC
- https://moodle.org/mod/forum/discuss.php?d=431099 x_refsource_MISC
Source
cvelistV5-main/cves/2022/0xxx/CVE-2022-0332.json