CVE-2024-48901

Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.

Reserved 2024-10-09 | Published 2024-11-18 | Updated 2024-11-18 | Assigner redhat

Problem types

Improper Authorization

Product status

Default status
unaffected

4.4.0 before 4.4.4
affected

4.3.0 before 4.3.8
affected

4.2.0 before 4.2.11
affected

4.1.0 before 4.1.14
affected

Any version before 4.1.0
affected

Timeline

2024-10-15:	Reported to Red Hat.
2024-10-15:	Made public.

References

bugzilla.redhat.com/show_bug.cgi?id=2318817 (RHBZ#2318817) issue-tracking

cve.org (CVE-2024-48901)

nvd.nist.gov (CVE-2024-48901)

Download JSON