CVE-2024-48898 - Moodle: some users can delete audiences of other reports

Back Back to CVE browser

MEDIUM

Moodle: some users can delete audiences of other reports

Published Nov 18, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.29%

Description

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (4)

https://bugzilla.redhat.com/show_bug.cgi?id=2318820
issue-trackingx_refsource_REDHATIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-3245
Advisory
https://github.com/advisories/GHSA-fjq9-452g-jg3q
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-48898

Link	Providers	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2318820		issue-trackingx_refsource_REDHATIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-3245		Advisory
https://github.com/advisories/GHSA-fjq9-452g-jg3q		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-48898