Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-48899

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

VectorNETWORK

PublishedNov 20, 2024, 11:15

Published Bypatrick@puiterwijk.org

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)4.4.0-beta4.4.3N/A

References

https://bugzilla.redhat.com/show_bug.cgi?id=2318819

Weakness Type

CWE-639

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK