CVE-2022-40316: Fedoraproject Extra Packages For Enterprise Linux

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 8.0 only
• Fedoraproject Fedora: version 35 only; version 36 only
• Moodle Moodle: from 3.9.0, before 3.9.17 (fixed in 3.9.17); from 3.11.0, before 3.11.10 (fixed in 3.11.10); from 4.0.0, before 4.0.4 (fixed in 4.0.4)

Published 2022-09-30. Last modified 2026-06-17.