CVE-2024-48900
Moodle: idor when accessing list of badge recipients
概要
Moodle: idor when accessing list of badge recipients
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.4.0"},{"fixed":"4.4.4"}]}]
参照URL
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org