CVE-2023-28329 (published 2023-03-23T00:00:00)
Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).
Affected products: Vendor: n/a
Product: moodle
Versions: 4.1 to 4.1.1, 4.0 to 4.0.6, 3.11 to 3.11.12, 3.9 to 3.9.19 and earlier unsupported versions