CVE-2024-43433

CVE-2024-43433 concerns Moodle where matrix room membership and power levels are incorrectly applied and revoked for suspended users. The description across sources consistently states the flaw exists in Moodle’s handling of user suspension with respect to matrix-based permissions, but the docume...

Moodle 4.3.x < 4.3.6, 4.4.x < 4.4.2 Improper Access Control Vulnerability (MSA-24-0034)

Moodle is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle";...