CVE-2024-48898

Description

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

Reserved 2024-10-09 | Published 2024-11-18 | Updated 2024-11-18 | Assigner redhat

Problem types

Missing Authorization

Product status

Default status
unaffected

4.4.0 before 4.4.4
affected

4.3.0 before 4.3.8
affected

4.2.0 before 4.2.11
affected

4.1.0 before 4.1.14
affected

Any version before 4.1.0
affected

Timeline

2024-10-15:	Reported to Red Hat.
2024-10-15:	Made public.

References

bugzilla.redhat.com/show_bug.cgi?id=2318820 (RHBZ#2318820) issue-tracking

cve.org (CVE-2024-48898)

nvd.nist.gov (CVE-2024-48898)

Download JSON