BIT-MOODLE-2024-45690 Moodle: idor when deleting oauth2 linked accounts

A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts...

CVE-2024-45690 Moodle: idor when deleting oauth2 linked accounts

A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts...

CVE-2024-45690

A flaw in the Moodle virtual learning environment allows for an Insecure Direct Object Reference (IDOR) when deleting OAuth2-linked accounts . The vulnerability stems from a lack of sufficient access control checks, which could allow an intruder to gain unauthorized access to limited functional c...