CVE-2024-43431

7.5

HIGHCVSS v3

Published

November 7, 2024

Affected

6 projects

Assigned by

Severity scale

010

Description

A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access.

GitHubMoodle - the world's open source learning platform

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2, >= 4.2.0-beta, < 4.2.9, >= 4.3.0-beta, < 4.3.6, >= 4.4.0-beta, < 4.4.2NVD

Crates.ioMoodle Webservice Client in Rust.

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

NPM

Model module for node for use with both mongodb and mysql.

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

Python Package IndexMoodle web services connection library

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

RubyGemsInteract with Moodle from ruby

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD

GitHubModel module for node for use with both mongodb and mysql.

< 4.1.12, >= 4.2.0, < 4.2.9, >= 4.3.0, < 4.3.6, >= 4.4.0, < 4.4.2NVD