CVE-2022-40316

🗓️ 30 Sep 2022 16:37:12Reported by fedoraType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 70 Views

The H5P activity attempts report did not filter by groups, potentially revealing unauthorized access

Reporter	Title	Published	Views	Family All 56
Circl	CVE-2022-40316	30 Sep 202220:36	–	circl
CNNVD	Moodle 安全漏洞	20 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-40316	30 Sep 202216:37	–	cvelist
EUVD	EUVD-2022-7001	3 Oct 202520:07	–	euvd
Github Security Blog	Moodle No groups filtering in H5P activity attempts report	1 Oct 202200:00	–	github
NVD	CVE-2022-40316	30 Sep 202217:15	–	nvd
OpenVAS	Moodle < 3.9.17, 3.11 < 3.11.10, 4.0 < 4.0.4 Multiple Vulnerabilities	10 Oct 202200:00	–	openvas
OSV	BIT-MOODLE-2022-40316	6 Mar 202411:02	–	osv
OSV	GHSA-385F-VGQ7-8HHX Moodle No groups filtering in H5P activity attempts report	1 Oct 202200:00	–	osv
OSV	UBUNTU-CVE-2022-40316	30 Sep 202217:15	–	osv

NVD

Node

moodle moodleRange3.9.0–3.9.17

moodle moodleRange3.11.0–3.11.10

moodle moodleRange4.0.0–4.0.4

Node

fedoraproject extra_packages_for_enterprise_linuxMatch8.0

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier unsupported versions"
      }
    ]
  }
]