CVE-2022-40208

CVE-2022-40208

Vendor N/A

Product Moodle

Weakness CWE-285

Published March 24, 2023

Last update February 20, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt.

Key dates

02Disclosure timeline

March 24, 2023 CVE published

February 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-40208 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

04Related CVE

CVE-2025-13116 macrozheng mall-swarm/mall cancelUserOrder improper authorization CVE-2026-28448 OpenClaw 2026.1.29 < 2026.2.1 - Authorization Bypass in Twitch Plugin allowFrom Access Control CVE-2025-64751 OpenFGA Improper Policy Enforcement CVE-2025-8147 LWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Function CVE-2026-2077 yeqifu warehouse Role Management RoleController.java deleteRole improper authorization