CVEvulnerability

CVE-2024-48899

4.3 MEDIUM Published 2024-11-20 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-284, CWE-639

Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

Affected configurations

• moodle moodle (>= 4.4.0 < 4.4.4)

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References