VULNERABILITY INTELLIGENCE
CVE-2022-0984
CVSS score4.3 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2022-04-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
Weakness classification
- secalert@redhat.com: CWE-863
- nvd@nist.gov: CWE-863
Primary references
- secalert@redhat.com — Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory