CVE-2025-26531
IDOR in badges allows disabling of arbitrary badges
Résumé
IDOR in badges allows disabling of arbitrary badges
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insufficient capability checks made it possible to disable badges a user does not have permission to access.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.16"},{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
Références
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org