CVE-2024-45689

MEDIUM

Moodle < 4.1.13 - Missing Authorization in Dynamic Tables

Title source: llm
STIX 2.1

Description

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

References (1)

Core 1
Core References
Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2309941

Scores

CVSS v3 6.5
EPSS 0.0013
EPSS Percentile 31.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-862
Status published
Products (2)
moodle/moodle < 4.1.13
moodle/moodle 0 - 4.1.13Packagist
Published Nov 20, 2024
Tracked Since Feb 18, 2026