A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=2318819 | Issue Tracking |
Configurations
History
02 Jun 2025, 15:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-639 | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2318819 - Issue Tracking | |
| First Time |
Moodle
Moodle moodle |
|
| CPE | cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* |
20 Nov 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-20 11:15
Updated : 2025-06-02 15:36
NVD link : CVE-2024-48899
Mitre link : CVE-2024-48899
JSON object : View
Products Affected
moodle
- moodle
CWE
CWE-639
Authorization Bypass Through User-Controlled Key