CVE-2024-1439

Summary

CVE-2024-1439 is a vulnerability affecting Moodle Learning Management System. This issue involves insufficient access controls, allowing a local user with student privileges to create unauthorized events. These events could be intended for users with higher roles, potentially leading to privilege escalation. Furthermore, an attacker could add events to the calendar of all users, violating their privacy without consent.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.