Security Advisory

CVE-2024-1439

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-12 10:51:44

Last updated 2024-08-01 18:40:21

Assigner INCIBE

State PUBLISHED

Description

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

← Browse all CVEs View on cve.org ↗