CVE-2024-43430
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2024-43430 represents a vulnerability in Moodle, an open-source learning management system. The issue involves a flaw in the Quiz module's external API, which can lead to insufficient access control being overridden. An attacker may exploit this weakness to gain unauthorized access and manipulate quiz data or settings, potentially impacting the security and integrity of learning content. This vulnerability underscores the importance of maintaining software up-to-date and implementing proper access control measures to mitigate the risk of unintended consequences.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.