Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-48899

Date: November 20, 2024

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

Language: PHP

Severity Score

Related Resources (6)

https://moodle.org/mod/forum/discuss.php?d=462878#p1858337
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/07ad4b8ebc715056056e01f2175820bfce6b290f
https://bugzilla.redhat.com/show_bug.cgi?id=2318819
https://nvd.nist.gov/vuln/detail/CVE-2024-48899
https://www.mend.io/vulnerability-database/CVE-2024-48899

Severity Score

Weakness Type (CWE)

Improper Access Control

CWE-284

Authorization Bypass Through User-Controlled Key

CWE-639

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us