Moodle SQL Injection (CVE-2021-36393)

Related Vulnerabilities: CVE-2021-36393  

Check Point Reference: CPAI-2021-2158 Date Published: 24 Apr 2024 Severity: Critical Last Updated: Wednesday 24 April, 2024 Source: Industry Reference:CVE-2021-36393
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Moodle prior to 3.9.8
Moodle 3.10.0 to 3.10.5
Moodle 3.11.0 to 3.11.1 Vulnerability Description An SQL injection vulnerability exists in Moodle. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.