CVE-2022-0983
Publication date 25 March 2022
Last updated 26 August 2025
Ubuntu priority
Description
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| moodle | 18.04 LTS bionic |
Needs evaluation
|
| 16.04 LTS xenial | Ignored end of standard support | |
| 14.04 LTS trusty | Ignored end of standard support |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
8.8 · High
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H