Description
A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
Published: 2024-11-20
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-j822-x5gg-5r56 Moodle allows users to retrieve information they did not have permission to access
History

Mon, 02 Jun 2025 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Moodle
Moodle moodle
Weaknesses CWE-862
CPEs cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
Vendors & Products Moodle
Moodle moodle

Wed, 20 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 20 Nov 2024 10:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
Title Moodle: unprotected access to sensitive information via dynamic tables
References

Subscriptions

Moodle Moodle
cve-icon MITRE

Status: PUBLISHED

Assigner: fedora

Published:

Updated: 2024-11-20T19:18:18.428Z

Reserved: 2024-09-04T22:00:30.976Z

Link: CVE-2024-45689

cve-icon Vulnrichment

Updated: 2024-11-20T19:18:13.720Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-20T11:15:05.337

Modified: 2025-06-02T15:33:57.730

Link: CVE-2024-45689

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses