Lucene search
Veracode Vulnerability DatabaseVERACODE:40012HistoryMar 31, 2023 - 8:17 a.m.
Sequential Quiz Bypass
2023-03-3108:17:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
sequential quiz
bypass
vulnerable
moodle
api
navigation
EPSS
0.001
Percentile
21.0%
moodle/moodle is vulnerable to Sequential Quiz Bypass. The vulnerability exists because some quizzes services don’t ensure sequential quiz questions in the API, which allows an attacker to bypass consecutive navigation during a quiz attempt.
References
github.com/advisories/GHSA-948f-j464-rfj2
github.com/moodle/moodle/commit/00e3145a6129737b0de2fd8e1a80a634156a6fad
github.com/moodle/moodle/commit/025e0297b65e6a8bd61efad0fdf36168c613f918
github.com/moodle/moodle/commit/284b201a28c89caf68b03430b1815efb7a527bad
github.com/moodle/moodle/commit/4cb39164fa3b28e64422464ba86fda001444c5e3
moodle.org/mod/forum/discuss.php?d=438761
Related
nvd
nvd
CVE-2022-40208
2023-03-24 20:15:08
osv
osv
CVE-2022-40208
2023-03-24 20:15:08
BIT-moodle-2022-40208
2024-03-06 11:03:06
cvelist
cvelist
CVE-2022-40208
2023-03-24 00:00:00
cve
cve
CVE-2022-40208
2023-03-24 20:15:08
ubuntucve
ubuntucve
CVE-2022-40208
2023-03-24 00:00:00
openvas
openvas
prion
prion
Design/Logic Flaw
2023-03-24 20:15:00
github
github
nessus
nessus
Moodle 4.0.x < 4.0.4 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.11.x < 3.11.10 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.17 Multiple Vulnerabilities
2023-02-20 00:00:00