CVE-2024-48900

4.3 mediumEPSS 0.4%

Medium (4.3) in moodle moodle. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2024-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

https://bugzilla.redhat.com/show_bug.cgi?id=2318818

Check your stack JSON