← back
CVE-2024-48899

Moodle: idor when accessing list of course badges

CVSS 4.3 MEDIUMEPSS 0.3%CWE-284
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
moodle

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →