Skip to content
fr Sign in
Not rated

CVE-2021-32474 An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer…

Description

An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

Affected products and versions

Product Affected versions Fixed in
Moodle Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Moodle

The 89 CVEs of Moodle →
CVE-2022-40208 In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… 4.3 Medium CVE-2021-36402 In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… 5.3 Medium CVE-2021-36395 In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… 7.5 High CVE-2021-36392 In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses Not rated
Track this CVE