Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-35132
HistoryJun 22, 2023 - 12:00 a.m.

CVE-2023-35132

2023-06-2200:00:00
ubuntu.com
ubuntu.com
42
moodle
sql injection
sso
access control
cve-2023-35132
unix

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

32.5%

A limited SQL injection risk was identified on the Mnet SSO access control
page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8,
3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchmoodle< anyUNKNOWN
ubuntu16.04noarchmoodle< anyUNKNOWN

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

32.5%