BIT-moodle-2024-48898

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/moodle/BIT-moodle-2024-48898.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-moodle-2024-48898
Aliases
Published
2024-11-21T07:13:24.286Z
Modified
2024-11-21T07:57:22.163960Z
Summary
[none]
Details

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

References

Affected packages

Bitnami / moodle

Package

Name
moodle
Purl
pkg:bitnami/moodle

Severity

  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.1.14
Introduced
4.2.0
Fixed
4.2.11
Introduced
4.3.0
Fixed
4.3.8
Introduced
4.4.0
Fixed
4.4.4