Auth bypass in Moodle
CVE-2024-45689
A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
Vulnerability class: Broken Access Control
EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
- patrick@puiterwijk.org (x_refsource_REDHAT, issue-tracking, Issue Tracking)
Frequently asked questions
- What is CVE-2024-45689?
- CVE-2024-45689 is a medium-severity vulnerability in Moodle, classified under Missing Authorization. CVSS score: 6.5/10. Published 2024-11-20.
- How severe is CVE-2024-45689?
- Medium severity. CVSS v3 base score is 6.5 out of 10.