CVE-2021-36392
Moodle SQL Injection vulnerability in packagist/moodle/moodle
Identifiers
CVE-2021-36392, GHSA-qc86-vgf2-6fq6
Package Slug
packagist/moodle/moodle
Vulnerability
Moodle SQL Injection vulnerability
Description
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.
Affected Versions
All versions before 3.9.8, all versions starting from 3.10.0 before 3.10.5, all versions starting from 3.11.0-beta before 3.11.1
Solution
Upgrade to versions 3.9.8, 3.10.5, 3.11.1 or above.
Last Modified
2023-03-08
| source |