CVE-2024-43436

7.2

HIGHCVSS v3

Published

November 7, 2024

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.

moodle/moodle

GitHubMoodle - the world's open source learning platform

>= 4.1.0, < 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2, < 4.1.12, >= 4.2.0-beta, < 4.2.9, >= 4.3.0-beta, < 4.3.6, >= 4.4.0-beta, < 4.4.2NVD

moodle

Crates.ioMoodle Webservice Client in Rust.

>= 4.1.0, < 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

moodle

More on this CVE

NVD↗GitHub Advisory↗

NPMModel module for node for use with both mongodb and mysql.

>= 4.1.0, < 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

moodle

Python Package IndexMoodle web services connection library

>= 4.1.0, < 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

moodle

RubyGemsInteract with Moodle from ruby

>= 4.1.0, < 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

>= 4.1.0, < 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

Security Advisories

CVE-2024-43436

Description

More on this CVE