Description

A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

Remediation

References

CVE-2023-35132

Related Vulnerabilities

WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.6.2)

WordPress Plugin Recip.ly 'uploadImage.php' Arbitrary File Upload (1.1.7)

WordPress Plugin Caldera Forms-More Than Contact Forms Multiple Cross-Site Scripting Vulnerabilities (1.5.9.1)

WordPress Other Vulnerability (CVE-2007-0262)

Magento Insufficient Verification of Data Authenticity Vulnerability (CVE-2019-8112)

Severity

Medium

Classification

CVE-2023-35132 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities