Vulnerability Bulletins |
MSA-25-0031: Upgrade ADOdb including security fix (upstream) |
|
| Affected software | PHP |
|
di Michael Hawkins. The upstream ADOdb library contained an SQL injection risk in the pg_insert_id() method. It is important to note that the core Moodle LMS was NOT affected by this vulnerability, however as a precaution, this library has been upgraded to remove the risk entirely, in case any third party code/plugins uses the vulnerable code.Severity/Risk:SeriousVersions affected:5.0, 4.5 to 4.5.4, 4.4 to 4.4.8, 4.1 to 4.1.18 and earlier unsupported versionsVersions fixed:5.0.1, 4.5.5, 4.4.9 More info: https://moodle.org/mod/forum/discuss.php?d=468502&parent=1880833 |
|