BIT-moodle-2024-43435

vendorUSosv

Moodle: can create global glossary without being admin

view advisory published 2025-05-02Licence: per source

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-43435US	medium5.3	0.34% (28th)	—	2024-11-11
A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=2304263WEB
https://moodle.org/mod/forum/discuss.php?d=461205ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2024-43435WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan