GHSA-4gq2-x5w4-7hp8LowCVSS 5.3

Moodle has insufficient capability checks

Published
November 11, 2024
Last Modified
November 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-43435 →

📋 Description

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.

🎯 Affected products4

  • composer/moodle/moodle:>= 4.4.0, < 4.4.2
  • composer/moodle/moodle:>= 4.3.0, < 4.3.6
  • composer/moodle/moodle:>= 4.2.0, < 4.2.9
  • composer/moodle/moodle:< 4.1.12

🔗 References (5)