Boletines de Vulnerabilidades

MSA-25-0010: SQL injection risk in course search module list filter

   
Software afectado PHP
 
von Michael Hawkins. An SQL injection risk was identified in the module list filter within course search.Severity/Risk:SeriousVersions affected:4.5 to 4.5.1, 4.4 to 4.4.5, 4.3 to 4.3.9, 4.1 to 4.1.15 and earlier unsupported versionsVersions fixed:4.5.2, 4.4.6, 4.3.10 and 4.1.16Reported by:Lars BonczekCVE identifier:CVE-2025-26533Changes (main):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84271Tracker issue:MDL-84271 SQL injection risk in course search

More info:

https://moodle.org/mod/forum/discuss.php?d=466150&parent=1871280