Описание
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| moodle | removed | package |
EPSS
Процентиль: 24%
0.00306
Низкий
Связанные уязвимости
CVSS3: 4.3
ubuntu
почти 2 года назад
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
CVSS3: 4.3
nvd
почти 2 года назад
A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.
CVSS3: 4.3
github
почти 2 года назад
Moodle IDOR when accessing list of course badges
CVSS3: 8.8
altlinux
почти 2 года назад
ALT-PU-2024-16417: package `moodle` update to version 4.5.0-alt1
CVSS3: 8.8
altlinux
почти 2 года назад
ALT-PU-2024-16385: package `moodle` update to version 4.5.0-alt1
EPSS
Процентиль: 24%
0.00306
Низкий