CVE-2024-48900
Moodle: idor when accessing list of badge recipients
Summary
Moodle: idor when accessing list of badge recipients
Original description
The description as published by the source.
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.4.0"},{"fixed":"4.4.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org