← voltar
CVE-2024-48899

Moodle: idor when accessing list of course badges

CVSS 4.3 MEDIUMEPSS 0.3%CWE-284
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
moodle

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →