Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-48898

Moodle: some users can delete audiences of other reports

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.4.0 to < 4.4.4affected
  • 4.3.0 to < 4.3.8affected
  • 4.2.0 to < 4.2.11affected
  • 4.1.0 to < 4.1.14affected
  • 0 to < 4.1.0affected

References