CVE-2024-48901

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-48901
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48901.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-48901
Aliases
Downstream
Published
2024-11-18T12:15:18.493Z
Modified
2025-11-20T12:31:38.084494Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.

References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type
GIT
Repo
https://github.com/moodle/moodle
Events
Introduced
ae4efa96ee8169a848c141ad21690165ea791552
Last affected
823f673b731637b6cc80fdb29ebd82d52a32b955
Last affected
d56aa41e9e88d27657baaf4834878f43458e292d
Introduced
ee91c6536f99e1633e2245780c4fe7f47340ed66
Last affected
d7e3bea9fa95ff686b370969cc1bcc3fca0919bf
Introduced
fe7aff8093240cc373f1ddaa66ecb91c4bc0a09f
Last affected
db959720edaa544188ccad8bf4b2b79db383b876

Affected versions

v4.*

v4.2.0
v4.2.1
v4.2.10
v4.2.11
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
v4.2.8
v4.2.9
v4.3.0
v4.3.0-beta
v4.3.0-rc1
v4.3.0-rc2
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.3.6
v4.3.7
v4.3.8
v4.4.0
v4.4.0-beta
v4.4.0-rc1
v4.4.0-rc2
v4.4.1
v4.4.2
v4.4.3
v4.4.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-48901.json"