2022-03-25 18:03:07
redhat
PUBLISHED
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.