1. Home
  2. CVE Database
  3. CVE-2024-1439
MEDIUM · 6.5

CVE-2024-1439

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attack...

Vulnerability Description

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
MoodleMoodle<= 4.2.11

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2024-1439?

CVE-2024-1439 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attack...

How severe is CVE-2024-1439?

CVE-2024-1439 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-1439?

Check the references section above for vendor advisories and patch information. Affected products include: Moodle Moodle.