What is GHSA-948f-j464-rfj2?

GHSA-948f-j464-rfj2 is a security advisory published by GitHub Security Advisories with Medium severity. Moodle may allow students to bypass sequential navigation during a quiz attempt

Which CVE IDs does GHSA-948f-j464-rfj2 cover?

GHSA-948f-j464-rfj2 covers the following CVE IDs: CVE-2022-40208. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-948f-j464-rfj2?

GHSA-948f-j464-rfj2 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-948f-j464-rfj2?

GHSA-948f-j464-rfj2 affects 3 products, including: composer/moodle/moodle:\u003e= 4.0.0, \u003c 4.0.3; composer/moodle/moodle:\u003e= 3.11.0, \u003c 3.11.9; composer/moodle/moodle:\u003c 3.9.16.

GHSA-948f-j464-rfj2MediumCVSS 4.3

Moodle may allow students to bypass sequential navigation during a quiz attempt

Vendor

GitHub Security Advisories

Published

March 24, 2023

Last Modified

March 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-40208 →

📋 Description

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.

🎯 Affected products3

composer/moodle/moodle:>= 4.0.0, < 4.0.3
composer/moodle/moodle:>= 3.11.0, < 3.11.9
composer/moodle/moodle:< 3.9.16

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-40208
https://moodle.org/mod/forum/discuss.php?d=438761
https://github.com/moodle/moodle/commit/025e0297b65e6a8bd61efad0fdf36168c613f918
https://git.moodle.org/gw?p=moodle.git;a=commitdiff;h=025e0297b65e6a8bd61efad0fdf36168c613f918
https://github.com/advisories/GHSA-948f-j464-rfj2