CVE-2024-43435
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Nov 11, 2024
Updated: Nov 12, 2024
CWE ID 754
Summary
CVE-2024-43435 is a vulnerability affecting Moodle, an popular open-source learning platform. The issue lies in insufficient capability checks, which enables users with access to restore glossaries in individual courses to move those restored glossaries into the global site glossary, potentially leading to unauthorized data modification. This could potentially cause disruptions and data security concerns, emphasizing the importance of applying the necessary patch or update to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.