Description

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

Remediation

References

CVE-2021-36393

Related Vulnerabilities

Oracle Database Server CVE-2010-2389 Vulnerability (CVE-2010-2389)

MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-45867)

WebLogic Incorrect Authorization Vulnerability (CVE-2018-1258)

WordPress Plugin WP Maintenance Mode & Site Under Construction Cross-Site Request Forgery (1.8.2)

Vanilla Forums Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000432)

Severity

Critical

Classification

CVE-2021-36393 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities