CVE-2022-0335

HIGH · CVSS 8.8 EPSS 0.61%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-01-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-0335

Severity

HIGH

CVSS

8.8

EPSS

0.61%

Original NVD Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.