Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-45689

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

VectorNETWORK

PublishedNov 20, 2024, 11:15

Published Bypatrick@puiterwijk.org

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)04.1.13N/A

moodle/moodle(Packagist)4.2.0-beta4.2.10N/A

moodle/moodle(Packagist)4.3.0-beta4.3.7N/A

moodle/moodle(Packagist)4.4.0-beta4.4.3N/A

References

https://bugzilla.redhat.com/show_bug.cgi?id=2309941

Weakness Type

CWE-862

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK