CVE-2024-48900

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2318818	Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

History

13 Jun 2025, 00:33

Type	Values Removed	Values Added
First Time		Moodle Moodle moodle
CWE		NVD-CWE-noinfo
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=2318818 -~~	() https://bugzilla.redhat.com/show_bug.cgi?id=2318818 - Issue Tracking
CPE		cpe:2.3:a:moodle:moodle::::::::

21 Nov 2024, 18:15

Type	Values Removed	Values Added
Summary		(es) Se encontró una vulnerabilidad en Moodle. Se requieren verificaciones adicionales para garantizar que los usuarios con permiso para ver los destinatarios de las insignias solo puedan acceder a las listas de aquellos a los que se les permite acceder.
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.3

13 Nov 2024, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-13 15:15

Updated : 2025-06-13 00:33

NVD link : CVE-2024-48900

Mitre link : CVE-2024-48900

CVE.ORG link : CVE-2024-48900

JSON object : View

Products Affected

moodle

moodle

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo

{"id": "CVE-2024-48900", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2024-11-13T15:15:07.577", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2318818", "tags": ["Issue Tracking"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en Moodle. Se requieren verificaciones adicionales para garantizar que los usuarios con permiso para ver los destinatarios de las insignias solo puedan acceder a las listas de aquellos a los que se les permite acceder."}], "lastModified": "2025-06-13T00:33:54.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E1F89F0-D04C-41A0-89D2-C45C94F29967", "versionEndExcluding": "4.4.4", "versionStartIncluding": "4.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}

4.3 /10