CVE-2024-45689: Moodle: unprotected access to sensitive information via dynamic tables
A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45689?
CVE-2024-45689 has a moderate severity level due to improper capability checks in dynamic tables.
How do I fix CVE-2024-45689?
To fix CVE-2024-45689, update Moodle to version 4.4.3, 4.3.7, 4.2.10, or 4.1.13.
What is the impact of CVE-2024-45689?
The impact of CVE-2024-45689 is that users can access information without proper permissions due to inadequate capability checks in dynamic tables.
Which versions of Moodle are affected by CVE-2024-45689?
Moodle versions from 4.4.0-beta to 4.4.3, 4.3.0-beta to 4.3.7, 4.2.0-beta to 4.2.10, and all versions up to 4.1.13 are affected by CVE-2024-45689.
Who should be concerned about CVE-2024-45689?
Administrators and users of Moodle who manage or access versions affected by CVE-2024-45689 should be concerned due to the risk of unauthorized information access.