CVE-2024-48899

Summary

CVE-2024-48899 is a newly discovered vulnerability affecting the Moodle learning management system. This issue allows unintended users to access the list of course badges for courses they should not have access to. The vulnerability arises due to insufficient access controls in place, potentially leading to privacy concerns and unauthorized access. Moodle users are strongly advised to implement additional checks to mitigate this risk, ensuring that only authorized individuals can view course badge lists.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.