CVE-2023-35132
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to data within the Moodle system, posing a threat to the integrity and confidentiality of information.
Recommendation
It is recommended to upgrade to the latest version of Moodle to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.