Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34698
HistoryMar 15, 2022 - 12:41 p.m.

SQL Injection

2022-03-1512:41:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

0.001 Low

EPSS

Percentile

37.1%

moodle/moodle is vulnerable to SQL Injection attacks. The library does not properly sanitize the keepalive_server function in the auth.php file allowing a malicious user to inject and execute malicious XML-RPC requests via the MNet peer.

0.001 Low

EPSS

Percentile

37.1%