Beveiligingsadvies

CVE-2021-32474

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-11 17:54:25
Laatst bijgewerkt 2024-08-03 23:17:29
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.