CVE-2024-48901

A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - secalert@redhat.com

Published

2024-11-18

Last modified

2024-11-18

Weaknesses

CWE-285, CWE-863

Affected products

• Moodle (Moodle)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2318817