CVE-2024-48901 — Moodle: idor when fetching report schedules

CVE-2024-48901

Moodle: idor when fetching report schedules PUBLISHED

Description (CNA)

A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit that report.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 4.4.0 before 4.4.4; affected 4.3.0 before 4.3.8; affected 4.2.0 before 4.2.11; affected 4.1.0 before 4.1.14; affected 0 before 4.1.0

CWE

CWE-285

References

https://bugzilla.redhat.com/show_bug.cgi?id=2318817

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.