CVE-2024-43433 MEDIUM

CVE-2024-43433: Moodle: matrix user/power level management not always working as expected with suspended users

Published November 11, 2024
Last update November 12, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users.

Key dates

02Disclosure timeline

November 11, 2024 CVE published
November 12, 2024 Record updated