ROS-20220329-02

Vulnerability in the Moodle course management system, related to insufficient cleansing of user data in the
Badges criteria code. Exploitation of the vulnerability could allow an attacker acting remotely,
send a specially crafted query to the affected application and execute arbitrary SQL commands on the application’s database
application database

Vulnerability in the Moodle course management system, related to permissions, privileges and access control.
access. Exploitation of the vulnerability could allow an attacker, acting remotely, to delete
users

Vulnerability in the Moodle course management system, related to improper access control. Exploitation
of the vulnerability could allow an attacker acting remotely to customize course icons using criteria for
profile fields