CVE-2024-48900
CVE-2024-48900 · Moodle: idor when accessing list of badge recipients
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
CVSS 4.3 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
moodle/moodle Packagist
- Versions
- v4.4.0
- v4.4.1
- v4.4.2
- v4.4.3
- Affected ranges
- ECOSYSTEM: ≥ 4.4.0, < 4.4.4
Update to 4.4.4