ROS-20220524-04

🗓️ 24 May 2022 00:00:00Reported by RedosType

The Moodle course management system has vulnerabilities allowing attackers to bypass account lockout, execute SQL commands, inject arbitrary HTML and gain unauthorized access to sensitive information

Reporter	Title	Published	Views	Family All 103
ATTACKERKB	CVE-2022-30599	18 May 202218:15	–	attackerkb
ATTACKERKB	CVE-2022-30598	18 May 202218:15	–	attackerkb
ATTACKERKB	CVE-2022-30600	18 May 202218:15	–	attackerkb
ATTACKERKB	CVE-2022-30597	18 May 202218:15	–	attackerkb
ATTACKERKB	CVE-2022-30596	18 May 202217:15	–	attackerkb
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.	30 May 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the moodle/badges:configurecriteria implementation in the virtual learning environment Moodle, which allows a violator to execute arbitrary SQL code	30 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the core_auth class implementation in the virtual learning environment Moodle, which allows a hacker to circumvent security restrictions	30 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the core_user class implementation in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information.	30 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the core_search class implementation in the virtual learning environment Moodle allows a intruder to gain unauthorized access to protected information.	1 Jun 202200:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	moodle	3.11.4-3	UNKNOWN

24 May 2022 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 27.5

CVSS 3.19.8

EPSS0.0685