Lucene search
China National Vulnerability DatabaseCNVD-2022-54916HistoryJul 21, 2022 - 12:00 a.m.
Moodle Input Validation Error Vulnerability (CNVD-2022-54916)
2022-07-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
0.003 Low
EPSS
Percentile
70.1%
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment.Moodle suffers from an input validation error vulnerability that stems from insufficient cleanup of SCORM tracking details, which can be exploited by attackers to cause stored cross-site scripting (XSS) and cross-site request forgery (SSRF) attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Moodle Moodle >=3.9.0， | lt | 3.9.15 | |
| Moodle Moodle >=3.11.0， | lt | 3.11.8 | |
| Moodle Moodle | eq | 4.0.0 | |
| Moodle Moodle | eq | 4.0.1 |
Related
prion
prion
Server side request forgery (ssrf)
2022-07-25 16:15:00
osv
osv
Moodle Stored XSS and blind SSRF possible via SCORM track details
2022-07-26 00:00:29
CVE-2022-35651
2022-07-25 16:15:08
BIT-moodle-2022-35651
2024-03-06 11:03:37
nvd
nvd
CVE-2022-35651
2022-07-25 16:15:08
veracode
veracode
Cross-site Scripting (XSS)
2022-07-26 03:32:52
cve
cve
CVE-2022-35651
2022-07-25 16:15:08
github
github
Moodle Stored XSS and blind SSRF possible via SCORM track details
2022-07-26 00:00:29
cvelist
cvelist
CVE-2022-35651
2022-07-25 15:30:22
ubuntucve
ubuntucve
CVE-2022-35651
2022-07-25 00:00:00
openvas
openvas
Moodle <= 3.9.14, 3.10 <= 3.11.7, 4.0 <= 4.0.1 Multiple Vulnerabilities
2022-07-26 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2022-81ce74b2dd)
2022-07-28 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2022-7e7ce7df2e)
2022-07-28 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: moodle-3.11.8-1.fc36
2022-07-27 02:24:14
[SECURITY] Fedora 35 Update: moodle-3.11.8-1.fc35
2022-07-27 02:35:50
nessus
nessus
Moodle 3.9.x < 3.9.15 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.11.x < 3.11.8 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 4.0.x < 4.0.2 Multiple Vulnerabilities
2023-02-20 00:00:00
redos
redos
ROS-20221013-02
2022-10-13 00:00:00