Description

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

Remediation

References

CVE-2024-48898

Related Vulnerabilities

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3295)

WordPress Plugin TAuto Poster includes Backdoor [Only if downloaded via the vendor website] (1.4.5)

ReviveAdserver Other Vulnerability (CVE-2016-9471)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1429)

WordPress Plugin Header Footer Code Manager Cross-Site Scripting (1.1.16)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-862 CVE-2024-48898