Vulnerabilities > Moodle > Moodle > 3.9.12

DATE CVE VULNERABILITY TITLE RISK
2022-04-29 CVE-2022-0985 Incorrect Authorization vulnerability in Moodle
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
network
low complexity
moodle CWE-863
4.3
4.3
2022-03-25 CVE-2022-0983 SQL Injection vulnerability in multiple products
An SQL injection risk was identified in Badges code relating to configuring criteria.
network
low complexity
moodle fedoraproject CWE-89
8.8
8.8