CVE-2024-48898CWE-862

Moodle: some users can delete audiences of other reports

Medium · published November 18, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-11-18T11:14Z
EPSS history
Timeline
  • 18 NOV 11:14Z
    Moodle: some users can delete audiences of other reports
    cvelistv5