MSA-26-0005: SQL injection risk in external database authentication plugin

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-04-28 19:02 UTC
Importiert: 2026-06-22 13:30 UTC
Quelle-ID: moodle
uid_hash: 1e7d1d02de9afd05ed5d845a293991cf331778b58c586c9414ba50d0553a202a

Moodle Security Announcements

Inhalt

by Michael Hawkins.

An SQL injection risk was identified in the "external database" authentication plugin (auth_db). Note: This only affected sites with the auth_db authentication plugin enabled.

Severity/Risk: Serious

Versions affected: 5.1 to 5.1.3, 5.0 to 5.0.6, 4.5 to 4.5.10 and earlier unsupported versions

Versions fixed: 5.1.4, 5.0.7 and 4.5.11

Reported by: Melvinsh

CVE identifier: CVE-2026-7274

Changes (main): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88138

Tracker issue: MDL-88138 SQL injection risk in external database authentication plugin

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-7274

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Moodle Security Announcements	moodle	vendor_advisory	cms	-	de	https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml

Zurueck zur Eintrags-Liste