DeutschShown in its original language — a full translation is planned for a future version.
Moodle: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und die Offenlegung von Informationen
view advisory published 2024-10-14
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Sicherheitsvorkehrungen zu umgehen und vertrauliche Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-48899US | — | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to. | ||||
| CVE-2024-48901US | medium4.3OT elevated | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report. | ||||
| CVE-2024-48898US | medium4.3OT elevated | — | ||
A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from. | ||||
| CVE-2024-48897US | medium4.3OT elevated | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify. | ||||
| CVE-2024-48896US | medium4.3 | — | ||
A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error… | ||||
| CVE-2024-48900US | — | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to hav… | ||||
02
references
External citations — patches, advisories, analysis.
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- WID-SEC-W-2024-3177 - CSAF Versionself
- WID-SEC-2024-3177 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan