CVE-2024-48900

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-48900

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48900.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-48900

Aliases

Published

2024-11-13T14:27:07Z

Modified

2026-08-12T03:51:26Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Moodle: idor when accessing list of badge recipients

Details

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

Database specific

{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-200"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48900.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.4.0"
                },
                {
                    "fixed": "4.4.4"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type

GIT

Repo

https://github.com/moodle/moodle

Events

Introduced

ee91c6536f99e1633e2245780c4fe7f47340ed66

Fixed

d7e3bea9fa95ff686b370969cc1bcc3fca0919bf

Database specific

Show details

{
    "cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.4"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v4.*

v4.4.0

v4.4.1

v4.4.2

v4.4.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48900.json"