Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Moodle Missing Authorization Vulnerability (CVE-2024-45689) - Vulnerability Database

Moodle Missing Authorization Vulnerability (CVE-2024-45689)

Description

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

References

CVE-2024-45689

Related Vulnerabilities

Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-39275) Critical
Common tags: Missing Update Known Vulnerabilities
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-10688) Medium
Common tags: Missing Update Known Vulnerabilities
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-10242) Medium
Common tags: Missing Update Known Vulnerabilities
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-10243) Critical
Common tags: Missing Update Known Vulnerabilities
ownCloud Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-10252) High
Common tags: Missing Update Known Vulnerabilities

Severity

Medium

Classification

CVE-2024-45689
CWE-862
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update
Known Vulnerabilities