CVE-2024-48901
18.11.2024, 12:15
A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.Enginsight
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 𝑥 ≤ 4.1.14 |
| moodle | moodle | 4.2.0 ≤ 𝑥 ≤ 4.2.11 |
| moodle | moodle | 4.3.0 ≤ 𝑥 ≤ 4.3.8 |
| moodle | moodle | 4.4.0 ≤ 𝑥 ≤ 4.4.4 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.