Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).
References
Configurations
History
23 Jan 2025, 17:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
|
| First Time |
Fedoraproject fedora
Moodle Moodle moodle Fedoraproject |
|
| References | () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300 - Patch | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2264099 - Issue Tracking | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ - Mailing List | |
| References | () https://moodle.org/mod/forum/discuss.php?d=455641 - Vendor Advisory |
21 Nov 2024, 09:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78300 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2264099 - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ - | |
| References | () https://moodle.org/mod/forum/discuss.php?d=455641 - |
29 Feb 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
19 Feb 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-19 17:15
Updated : 2025-01-23 17:37
NVD link : CVE-2024-25983
Mitre link : CVE-2024-25983
CVE.ORG link : CVE-2024-25983
JSON object : View
Products Affected
fedoraproject
- fedora
moodle
- moodle
CWE
CWE-639
Authorization Bypass Through User-Controlled Key