Description
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | moodle | 4.4.0 – < 4.4.4 | 4.4.4 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | moodle/moodle | >= 4.4.0, < 4.4.4 | 4.4.4 | GHSA-g8r3-2v89-j6r5 |
Advisories 1
- WID-SEC-2024-3177 Moodle: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und die Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 14, 2024
References
- RHBZ#2318818 issue-tracking