GHSA-fjq9-452g-jg3qMediumCVSS 6.5

moodle: Some users can delete audiences of other reports

Published
November 18, 2024
Last Modified
November 18, 2024

🔗 CVE IDs covered (1)

CVE-2024-48898 →

📋 Description

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

🎯 Affected products4

  • composer/moodle/moodle:< 4.1.14
  • composer/moodle/moodle:>= 4.2.0, < 4.2.11
  • composer/moodle/moodle:>= 4.3.0, < 4.3.8
  • composer/moodle/moodle:>= 4.4.0, < 4.4.4

🔗 References (3)