GHSA-g8r3-2v89-j6r5Medium

Moodle IDOR when accessing list of badge recipients

Published
November 13, 2024
Last Modified
November 13, 2024

🔗 CVE IDs covered (1)

CVE-2024-48900 →

📋 Description

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

🎯 Affected products1

  • composer/moodle/moodle:>= 4.4.0, < 4.4.4

🔗 References (5)