Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-45689

Moodle: unprotected access to sensitive information via dynamic tables

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 0 to < 4.1.13affected
  • 4.2 to < 4.2.10affected
  • 4.3 to < 4.3.7affected
  • 4.4 to < 4.4.3affected

References