GHSA-j822-x5gg-5r56MediumCVSS 6.5

Moodle allows users to retrieve information they did not have permission to access

Published
November 20, 2024
Last Modified
June 4, 2025

🔗 CVE IDs covered (1)

CVE-2024-45689 →

📋 Description

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

🎯 Affected products4

  • composer/moodle/moodle:< 4.1.13
  • composer/moodle/moodle:>= 4.2.0-beta, < 4.2.10
  • composer/moodle/moodle:>= 4.3.0-beta, < 4.3.7
  • composer/moodle/moodle:>= 4.4.0-beta, < 4.4.3

🔗 References (5)