CVE-2024-48900

A

vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

References
Configurations

Configuration 1 (hide)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

History

13 Jun 2025, 00:33

Type Values Removed Values Added
References () https://bugzilla.redhat.com/show_bug.cgi?id=2318818 - () https://bugzilla.redhat.com/show_bug.cgi?id=2318818 - Issue Tracking
First Time Moodle
Moodle moodle
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

21 Nov 2024, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.3
Summary
  • (es) Se encontró una vulnerabilidad en Moodle. Se requieren verificaciones adicionales para garantizar que los usuarios con permiso para ver los destinatarios de las insignias solo puedan acceder a las listas de aquellos a los que se les permite acceder.

13 Nov 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-13 15:15

Updated : 2025-06-13 00:33


NVD link : CVE-2024-48900

Mitre link : CVE-2024-48900

CVE.ORG link : CVE-2024-48900


JSON object : View

Products Affected
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo