PoC Index

CVE-2022-0332

CRITICAL 9.8EPSS 44.9%

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
44.92% chance of exploitation in the next 30 days, 99th percentile
Published
2022-01-25
Updated
2024-08-02

Proof-of-concept exploits (2)

ExploitDB entries (1)

References

Related