BIT-moodle-2024-48899

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/moodle/BIT-moodle-2024-48899.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-moodle-2024-48899
Aliases
Published
2025-06-03T14:59:22.068Z
Modified
2025-06-03T16:59:28.662067Z
Summary
Moodle: idor when accessing list of course badges
Details

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

Database specific
{
    "cpes": [
        "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / moodle

Package

Name
moodle
Purl
pkg:bitnami/moodle

Severity

  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
4.4.0
Fixed
4.4.4