GHSA-fjq9-452g-jg3q

ghsaUSosv

moodle: Some users can delete audiences of other reports

view advisory published 2024-11-18Licence: CC-BY-4.0

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-48898US	medium4.3OT elevated	0.29% (22nd)	—	2024-11-18
A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=2318820WEB
https://github.com/moodle/moodlePACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2024-48898ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan