Description

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

Remediation

References

CVE-2024-1439

Related Vulnerabilities

Oracle Database Server Improper Input Validation Vulnerability (CVE-2018-1000873)

Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1999019)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1612)

WordPress Plugin Post Grid PHP Object Injection (2.0.11)

PostgreSQL Improper Input Validation Vulnerability (CVE-2019-10210)

Severity

Low

Classification

CVE-2024-1439 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities