Moodle may allow students to bypass sequential navigation during a quiz attempt

MOYENNE 4.3CVE-2022-40208 · BIT-moodle-2022-40208 · GHSA-948f-j464-rfj2 · Published 24/03/2023 · updated 17/06/2026

En bref

CVE-2022-40208 est une vulnérabilité MOYENNE (CVSS 4.3) touchant moodle/moodle, moodle (moodle).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.56%, plus élevée que 46.8% des vulnérabilités.
Correctif : mettre à jour vers 3.11.9, 4.0.3, 3.9.16 ou plus récent.

Package	Affected versions	Patched versions
moodle/moodle Packagist	`≥ 3.11.0, < 3.11.9≥ 4.0.0, < 4.0.3< 3.9.16`	`3.11.94.0.33.9.16`
moodle moodle	`= 3.11.0= 3.9.0= 4.0.0> 3.11.0, < 3.11.9> 3.9.0, < 3.9.16> 4.0.0, < 4.0.3`	`3.11.93.9.164.0.3`

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.

NVD description

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 3.11.0, < 3.11.9≥ 4.0.0, < 4.0.3< 3.9.16

3.11.94.0.33.9.16

= 3.11.0= 3.9.0= 4.0.0> 3.11.0, < 3.11.9> 3.9.0, < 3.9.16> 4.0.0, < 4.0.3

3.11.93.9.164.0.3

Description

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.

NVD description

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.

Autres vulnérabilités de moodle/moodle

Tout voir →