BIT-MOODLE-2024-45690 Moodle: idor when deleting oauth2 linked accounts

A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts...

CVE-2024-45690 Moodle: idor when deleting oauth2 linked accounts

A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts...

CVE-2024-45690

CVE-2024-45690 affects Moodle and concerns an IDOR when deleting OAuth2-linked accounts. The connected sources describe a flaw where additional checks are needed to ensure users can only delete their own OAuth2-linked accounts, indicating insufficient authorization checks in the relevant Moodle f...