GHSA-r4xr-m393-778mMediumCVSS 4.3

Moodle IDOR when accessing list of course badges

Published
November 20, 2024
Last Modified
November 20, 2024

🔗 CVE IDs covered (1)

CVE-2024-48899 →

📋 Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

🎯 Affected products1

  • composer/moodle/moodle:>= 4.4.0-beta, < 4.4.3

🔗 References (5)