CVE-2024-45689

Moodle: unprotected access to sensitive information via dynamic tables

Medium · published November 20, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Published
2024-11-20T10:22Z
EPSS history
Timeline
  • 20 NOV 10:22Z
    Moodle: unprotected access to sensitive information via dynamic tables
    cvelistv5