Description In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses. Remediation References CVE-2021-36393 Related Vulnerabilities Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34305) WordPress Plugin Active Directory Integration/LDAP Integration Unspecified Vulnerability (3.7.6) Plone CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7135) Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2155) MongoDb CVE-2024-6384 Vulnerability (CVE-2024-6384) Severity Critical Classification CVE-2021-36393 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities