GHSA-x3x9-349x-2485MediumCVSS 6.5

moodle: IDOR in edit/delete RSS feed

Published
November 18, 2024
Last Modified
November 20, 2024

🔗 CVE IDs covered (1)

CVE-2024-48897 →

📋 Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.

🎯 Affected products4

  • composer/moodle/moodle:< 4.1.14
  • composer/moodle/moodle:>= 4.2.0, < 4.2.11
  • composer/moodle/moodle:>= 4.3.0, < 4.3.8
  • composer/moodle/moodle:>= 4.4.0, < 4.4.4

🔗 References (3)