CVE-2021-36393

Description

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

Affected packages (2)

• Bitnami/moodlefrom 0, < 3.9.8, >= 3.10.0, < 3.10.5, >= 3.11.0, < 3.11.1
• Packagist/moodle/moodle>= 3.11.0-beta, < 3.11.1

CVSS scores

References (3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-36393
• PATCHhttps://github.com/moodle/moodle
• WEBhttps://moodle.org/mod/forum/discuss.php?d=424798