CVE-2024-48898

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

History

20 Nov 2024, 14:46

Type Values Removed Values Added
First Time Moodle
Moodle moodle
References () https://bugzilla.redhat.com/show_bug.cgi?id=2318820 - () https://bugzilla.redhat.com/show_bug.cgi?id=2318820 - Issue Tracking
CPE cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.3

18 Nov 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-18 12:15

Updated : 2024-11-20 14:46


NVD link : CVE-2024-48898

Mitre link : CVE-2024-48898


JSON object : View

Products Affected

moodle

  • moodle
CWE
CWE-862

Missing Authorization