CVE-2024-48897: Moodle: idor in edit/delete rss feed
A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.
Other sources
Additional checks were required to ensure users can only edit or delete RSS feeds they have permission to modify.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID CVE-2024-48897 about?
CVE-2024-48897 is a vulnerability in Moodle that requires additional checks to ensure users can only edit or delete RSS feeds they have permission to modify.
What versions of Moodle are affected by CVE-2024-48897?
CVE-2024-48897 affects Moodle versions from 4.1.14 up to but not including 4.4.4, along with versions 4.2.0 to 4.2.11 and 4.3.0 to 4.3.8.
What is the severity of CVE-2024-48897?
The severity of CVE-2024-48897 can potentially lead to unauthorized editing or deletion of RSS feeds, depending on user permissions.
How do I fix the vulnerability CVE-2024-48897?
To fix CVE-2024-48897, update your Moodle installation to version 4.4.4, 4.3.8, or 4.2.11.
What potential impact does CVE-2024-48897 have on Moodle users?
CVE-2024-48897 may allow unauthorized users to modify or delete RSS feeds that they should not have access to.