CVE-2024-48898

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-48898
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-48898.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-48898
Aliases
Related
Published
2024-11-18T12:15:18Z
Modified
2025-02-14T11:56:38.077982Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

References

Affected packages

Git / github.com/moodle/moodle

Affected versions

v4.*

v4.2.0
v4.2.1
v4.2.10
v4.2.11
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
v4.2.8
v4.2.9
v4.3.0
v4.3.0-beta
v4.3.0-rc1
v4.3.0-rc2
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
v4.3.7
v4.3.8
v4.4.0
v4.4.0-beta
v4.4.0-rc1
v4.4.0-rc2
v4.4.1
v4.4.2
v4.4.3
v4.4.4