CVEvulnerability

CVE-2022-0984

4.3 MEDIUM Published 2022-04-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-863

Description

Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.

Affected configurations

• moodle moodle (>= 3.9.0 < 3.9.13) • moodle moodle (>= 3.10.0 < 3.10.10) • moodle moodle (>= 3.11.0 < 3.11.6) • fedoraproject fedora 34 • fedoraproject fedora 35 • fedoraproject fedora 36 • redhat enterprise linux 7.0

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References