CVE-2024-48898 — Moodle: some users can delete audiences of other reports

CVE-2024-48898

Moodle: some users can delete audiences of other reports PUBLISHED

Description (CNA)

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 4.4.0 before 4.4.4; affected 4.3.0 before 4.3.8; affected 4.2.0 before 4.2.11; affected 4.1.0 before 4.1.14; affected 0 before 4.1.0

CWE

CWE-862

References

https://bugzilla.redhat.com/show_bug.cgi?id=2318820

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.