CVE-2024-48900

MEDIUM

Moodle 4.4.0-4.4.3 - Exposure of Sensitive Information via Badge Recipient Access Control

Title source: llm
STIX 2.1

Description

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

References (1)

Core 1
Core References
Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2318818

Scores

CVSS v3 4.3
EPSS 0.0026
EPSS Percentile 49.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (2)
moodle/moodle 4.4.0 - 4.4.4
moodle/moodle 4.4.0 - 4.4.4Packagist
Published Nov 13, 2024
Tracked Since Feb 18, 2026