CVE-2024-43430

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Nov 11, 2024
Updated: Nov 12, 2024
CWE ID 276

Summary

CVE-2024-43430 represents a vulnerability in Moodle, an open-source learning management system. The issue involves a flaw in the Quiz module's external API, which can lead to insufficient access control being overridden. An attacker may exploit this weakness to gain unauthorized access and manipulate quiz data or settings, potentially impacting the security and integrity of learning content. This vulnerability underscores the importance of maintaining software up-to-date and implementing proper access control measures to mitigate the risk of unintended consequences.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share