CVE-2024-48900
Moodle: idor when accessing list of badge recipients
Résumé
Moodle: idor when accessing list of badge recipients
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.4.0"},{"fixed":"4.4.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org