CVE-2022-0332

critical · 9.8

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

9.8

CVSS

44.9%

EPSS (exploit prob.)

99th

EPSS percentile

2022-01-25

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
moodle	moodle	>= 3.11.0, < 3.11.5

Check a specific version with /api/v1/cve/match.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2043661
https://moodle.org/mod/forum/discuss.php?d=431099
https://bugzilla.redhat.com/show_bug.cgi?id=2043661
https://moodle.org/mod/forum/discuss.php?d=431099

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-0332