CVE-2024-48899

Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

Reserved 2024-10-09 | Published 2024-11-20 | Updated 2024-11-20 | Assigner fedora

Problem types

Improper Access Control

Product status

Default status
unaffected

4.4.0 before 4.4.4
affected

Timeline

2024-10-15:	Reported to Red Hat.
2024-10-15:	Made public.

References

bugzilla.redhat.com/show_bug.cgi?id=2318819 (RHBZ#2318819) issue-tracking

cve.org (CVE-2024-48899)

nvd.nist.gov (CVE-2024-48899)

Download JSON