← CVE Intelligence

CVE-2024-1439

Inadequate access control vulnerability in Moodle PUBLISHED

Description (CNA)

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

Affected (CNA)

Vendor / productVersions
Moodle / LMSaffected 0 through 4.2

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.