CVE-2022-0984: Fedoraproject Fedora

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Moodle Moodle: from 3.9.0, before 3.9.13 (fixed in 3.9.13); from 3.10.0, before 3.10.10 (fixed in 3.10.10); from 3.11.0, before 3.11.6 (fixed in 3.11.6)
• Red Hat Enterprise Linux: version 7.0 only

Published 2022-04-29. Last modified 2026-06-17.