CVE-2024-48899CWE-284

Moodle: idor when accessing list of course badges

Medium · published November 20, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-11-20T10:25Z
EPSS history
Timeline
  • 20 NOV 10:25Z
    Moodle: idor when accessing list of course badges
    cvelistv5