First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-39183

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Moodle Plugin - SAML Auth	Moodle Plugin - SAML Auth	—

References

Timeline

Published: Jan 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-391849.8EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass.CVE-2022-391859.8EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user.CVE-2022-391865.5EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions CVE-2022-391876.1Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.CVE-2022-391884.7An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versu CVE-2022-391897.8An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel b CVE-2022-39194.8The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perf CVE-2022-391905.5An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an CVE-2022-391935.3An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information CVE-2022-391944.9An issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for the GrowthExperiments extension could cause a CVE-2022-391956.1A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML v CVE-2022-391966.5Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visitin

CVE-2022-39183: Medium severity, CVSS 6.1 | Vulnix