ByteOS Network

NVD Vulnerability Details :

CVE-2024-45689

Analyzed

Source-patrick@puiterwijk.org

Published At-20 Nov, 2024 | 11:15

Updated At-02 Jun, 2025 | 15:33

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CPE Matches

Moodle Pty Ltd

>>moodle>>Versions before 4.1.13(exclusive)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Moodle Pty Ltd

>>moodle>>Versions from 4.2.0(inclusive) to 4.2.10(exclusive)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Moodle Pty Ltd

>>moodle>>Versions from 4.3.0(inclusive) to 4.3.7(exclusive)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Moodle Pty Ltd

>>moodle>>Versions from 4.4.0(inclusive) to 4.4.3(exclusive)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-862	Primary	nvd@nist.gov

CWE ID: CWE-862

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2309941	patrick@puiterwijk.org	Issue Tracking

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=2309941

Source: patrick@puiterwijk.org

Resource:

Issue Tracking

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History