CVE-2024-45689 — Moodle: unprotected access to sensitive information via dynamic tables

CVE-2024-45689

Moodle: unprotected access to sensitive information via dynamic tables PUBLISHED

Description (CNA)

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 4.1.13; affected 4.2 before 4.2.10; affected 4.3 before 4.3.7; affected 4.4 before 4.4.3

CWE

No CWE identifiers supplied.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2309941

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.