CVE-2024-48900

Description

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

Reserved 2024-10-09 | Published 2024-11-13 | Updated 2024-11-21 | Assigner redhat

Problem types

Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
unaffected

4.4.0 before 4.4.4
affected

Timeline

2024-10-15:	Reported to Red Hat.
2024-10-15:	Made public.

References

bugzilla.redhat.com/show_bug.cgi?id=2318818 (RHBZ#2318818) issue-tracking

cve.org (CVE-2024-48900)

nvd.nist.gov (CVE-2024-48900)

Download JSON