Linux Distros Unpatched Vulnerability : CVE-2024-48901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit tha...

Moodle 4.3.x < 4.3.8 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...

Improper Authorization

Moodle is vulnerable to Improper Authorization. The vulnerability is due to insufficient access control, allowing users to view the schedule of a report even if they lack permission to edit that report...

UBUNTU-CVE-2024-48901

A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report...

CVE-2024-48901

CVE-2024-48901 describes an IDOR-style authorization issue in Moodle: users may access the schedule of a report without having edit permission. Connected docs indicate affected Moodle versions include pre-4.1.14, pre-4.2.11 (4.2.x), pre-4.3.8 (4.3.x), and pre-4.4.4 (4.4.x). Multiple sources (GHSA...

PT-2024-8663 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A vulnerability was found in Moodle, related to insufficient authentication procedure, which may allow a remote attacker to gain unauthorized access to system elements. The issue requires...

pferdebalsam-teufelskralle.de Improper Access Control vulnerability OBB-2407441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...