Description

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

Remediation

References

CVE-2024-45689

Related Vulnerabilities

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2601)

PHPFusion Multiple SQL Injection Vulnerabilities (CVE-2014-8596)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6905)

ownCloud Other Vulnerability (CVE-2012-5057)

phpMyAdmin CVE-2016-6633 Vulnerability (CVE-2016-6633)

Severity

Medium

Classification

CVE-2024-45689 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities