Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-43435

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.

VectorNETWORK

PublishedNov 11, 2024, 13:15

Published Bypatrick@puiterwijk.org

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)4.4.04.4.2N/A

moodle/moodle(Packagist)4.3.04.3.6N/A

moodle/moodle(Packagist)4.2.04.2.9N/A

moodle/moodle(Packagist)04.1.12N/A

References

https://bugzilla.redhat.com/show_bug.cgi?id=2304263
https://moodle.org/mod/forum/discuss.php?d=461205

Weakness Type

CWE-754

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK