CVE-2022-0332

    Dashboard / Vulnerabilities / CVE-2022-0332

    CVE-2022-0332

    Published: 25 Jan 2022Last Modified: 12 Aug 2026

    Summary:

    Details: A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

    References: https://moodle.org/mod/forum/discuss.php?d=431099, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0332.json, https://nvd.nist.gov/vuln/detail/CVE-2022-0332, https://bugzilla.redhat.com/show_bug.cgi?id=2043661

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 94f2d3fc4b974c5c7d500988c56b7ca15f58d7ec
    Fixed -a59bec2a6f3c093ebe3b8eb0316c07188a4a339e

    Affected versions

    v3.11.4
    v3.11.3
    v3.11.1
    v3.11.2
    v3.11.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-0332 | CVE-DB