CVE-2024-1439CWE-284

Inadequate access control vulnerability in Moodle

Medium · published February 12, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-02-12T10:51Z
EPSS history
Timeline
  • 12 FEB 10:51Z
    Inadequate access control vulnerability in Moodle
    cvelistv5