CVE-2022-0984
Publication date 29 April 2022
Last updated 26 August 2025
Ubuntu priority
Description
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| moodle | 18.04 LTS bionic |
Needs evaluation
|
| 16.04 LTS xenial | Ignored end of ESM support, was needs-triage |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
4.3 · Medium
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N