Description

Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.

Remediation

References

CVE-2022-0984

Related Vulnerabilities

Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2005-2970)

WordPress Plugin Smooth Scroll Page Up/Down Buttons Cross-Site Scripting (1.3)

WordPress Plugin WP Custom Admin Login Page Logo Unspecified Vulnerability (1.4.1)

Squid Use After Free Vulnerability (CVE-2023-49288)

MySQL CVE-2023-21977 Vulnerability (CVE-2023-21977)

Severity

Medium

Classification

CVE-2022-0984 CWE-863 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities