CVE-2024-48899
Moodle: idor when accessing list of course badges
Summary
Moodle: idor when accessing list of course badges
Original description
The description as published by the source.
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.4.0"},{"fixed":"4.4.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org