CVE-2021-36393

CRITICAL 9.8EPSS 52.3%

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 52.30% chance of exploitation in the next 30 days, 99th percentile
Published: 2023-03-06
Updated: 2025-03-06

Proof-of-concept exploits (3)

StackOverflowExcept1on/CVE-2021-363934★ · 2026-08-16
T0X1Cx/CVE-2021-36393-Exploit22★ · 2024-07-07
T0X1Cx/CVE-2021-36396-Exploit22★ · 2024-07-07

References

Related