Description

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

Remediation

References

CVE-2024-48898

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2007-4783)

Oracle JRE CVE-2024-20918 Vulnerability (CVE-2024-20918)

MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-21631)

Jetty CVE-2020-27218 Vulnerability (CVE-2020-27218)

Severity

Medium

Classification

CVE-2024-48898 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities