Linux Distros Unpatched Vulnerability : CVE-2024-43431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access...

BIT-MOODLE-2024-43431 Moodle: idor in badges allows deletion of arbitrary badges

A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access...

Access Control Bypass

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Access Control Bypass due to insufficient capability checks. An attacker can delete badges they are not authorized to access by exploiting these checks. Remediation Upgrade moodle/moodle to version...