CVE-2024-33996

6.2

MEDIUMCVSS v3

Published

May 31, 2024

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.

moodle/moodle

GitHubMoodle - the world's open source learning platform

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

moodle

Crates.ioMoodle Webservice Client in Rust.

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

moodle

NPM

More on this CVE

NVD↗GitHub Advisory↗

Model module for node for use with both mongodb and mysql.

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

moodle

Python Package IndexMoodle web services connection library

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

moodle

RubyGemsInteract with Moodle from ruby

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

mrcrgl/moodle

GitHubModel module for node for use with both mongodb and mysql.

< 4.1.10, >= 4.2.0, < 4.2.7, >= 4.3.0, < 4.3.4NVD

Security Advisories

CVE-2024-33996

Description

More on this CVE