CVE-2022-0983CWE-89

An SQL injection risk was identified in Badges code relating to configuring criteria

published March 25, 2022

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00909 · 59.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-03-25T18:03Z
EPSS history
Timeline
  • 25 MAR 18:03Z
    An SQL injection risk was identified in Badges code relating to configuring criteria
    cvelistv5