CVE-2024-48900CWE-200

Moodle: idor when accessing list of badge recipients

Medium · published November 13, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-11-13T14:27Z
EPSS history
Timeline
  • 13 NOV 14:27Z
    Moodle: idor when accessing list of badge recipients
    cvelistv5