CVE-2024-45689

Source
https://cve.org/CVERecord?id=CVE-2024-45689
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45689.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-45689
Aliases
Downstream
Published
2024-11-20T11:15:05.337Z
Modified
2026-02-15T08:14:58.465588Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Affected versions

v4.*
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
v4.2.8
v4.2.9
v4.3.0
v4.3.0-beta
v4.3.0-rc1
v4.3.0-rc2
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
v4.4.0
v4.4.0-beta
v4.4.0-rc1
v4.4.0-rc2
v4.4.1
v4.4.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45689.json"