Lucene search

FedoraCVELIST:CVE-2022-30597

HistoryMay 18, 2022 - 5:02 p.m.

CVE-2022-30597

2022-05-1817:02:35

CWE-472

fedora

www.cve.org

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

JSON

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.

CNA Affected

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects : 4.0, 3.11 to 3.11.6, 3.10 to 3.10.10, 3.9 to 3.9.13 and earlier unsupported versions"
      }
    ]
  }
]

References

git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-74318

bugzilla.redhat.com/show_bug.cgi?id=2083585

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGF35EN5K2R6X3NTY3XPZSJ3UDASMXI6/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIMSIRKCFLIC646K4GMUSZU7THOUVPAJ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCTWSE3JDMSYL7DPCMXMMJEXZSS6VIA5/

moodle.org/mod/forum/discuss.php?d=434579