Vulnerabilities > CVE-2024-25983 - Authorization Bypass Through User-Controlled Key vulnerability in multiple products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

moodle

fedoraproject

CWE-639

NVD

Published: 2024-02-19

Updated: 2025-01-23

Summary

Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).

Vulnerable Configurations

Part	Description	Count
Application	Moodle Moodle Moodle 4.3.0 Moodle Moodle 4.3.1 Moodle Moodle 4.3.2 Moodle Moodle 4.2.0 Moodle Moodle 4.2.1 Moodle Moodle 4.2.2 Moodle Moodle 4.2.3 Moodle Moodle 4.2.4 Moodle Moodle 4.2.5 Moodle Moodle 4.1.0 Moodle Moodle 4.1.1 Moodle Moodle 4.1.3 Moodle Moodle 4.1.4 Moodle Moodle 4.1.5 Moodle Moodle 4.1.6 Moodle Moodle 4.1.8	27
OS	Fedoraproject Fedoraproject Fedora 38	1

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References