CVE-2024-43435

Moodle: can create global glossary without being admin

Medium · published November 11, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
26.8
In the wild
Unconfirmed
What it is

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.8th percentile
Published
2024-11-11T12:17Z
EPSS history
Timeline
  • 11 NOV 12:17Z
    Moodle: can create global glossary without being admin
    cvelistv5