GHSA-xhq3-455r-xv44

GitHub Security Advisory

Moodle SQL injection via user preferences

✓ GitHub Reviewed CRITICAL Has CVE

In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

Packagist moodle/moodle

Affected versions: 2.7 (fixed in 2.7.19)

Packagist moodle/moodle

Affected versions: 3.0 (fixed in 3.0.9)

Packagist moodle/moodle

Affected versions: 3.1 (fixed in 3.1.5)

Packagist moodle/moodle

Affected versions: 3.2 (fixed in 3.2.2)

CVE-2017-2641

GHSA ID

GHSA-xhq3-455r-xv44

Published

May 17, 2022 2:12 AM

Last Modified

April 23, 2024 11:42 PM

CVSS Score

9.0 /10

Primary Ecosystem

Packagist

Primary Package

moodle/moodle

GitHub Reviewed

✓ Yes

Last updated: August 3, 2025 6:48 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.