CVE-2024-43433 — Moodle: matrix user/power level management not always working as expected with suspended users

CVE-2024-43433

Moodle: matrix user/power level management not always working as expected with suspended users PUBLISHED

Description (CNA)

A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users.

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 4.1.12; affected 4.2 before 4.2.9; affected 4.3 before 4.3.6; affected 4.4 before 4.4.2

No CWE identifiers supplied.

CISA-ADP

No English description supplied.

No references supplied.