Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.

Remediation

References

CVE-2024-48901

Related Vulnerabilities

Magento Incorrect Authorization Vulnerability (CVE-2021-28567)

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Request Forgery (2.3.9)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)

Nexus Repository Manager CVE-2019-15893 Vulnerability (CVE-2019-15893)

EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-863 CVE-2024-48901