DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Moodle: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und die Offenlegung von Informationen
Advisory ansehen veröffentlicht 2024-10-14
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Moodle ausnutzen, um Sicherheitsvorkehrungen zu umgehen und vertrauliche Informationen offenzulegen.
01
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-48899US | — | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to. | ||||
| CVE-2024-48901US | medium4.3OT erhöht | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report. | ||||
| CVE-2024-48898US | medium4.3OT erhöht | — | ||
A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from. | ||||
| CVE-2024-48897US | medium4.3OT erhöht | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify. | ||||
| CVE-2024-48896US | medium4.3 | — | ||
A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error… | ||||
| CVE-2024-48900US | — | — | ||
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to hav… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- Moodle Security announcements vom 2024-10-14external
- WID-SEC-W-2024-3177 - CSAF Versionself
- WID-SEC-2024-3177 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan