CVE-2024-48897

CVE-2024-48897: Moodle: idor in edit/delete rss feed

Weakness CWE-285

Published November 18, 2024

Last update November 19, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability was found in Moodle. Additional checks are required to ensure users can only edit or delete RSS feeds that they have permission to modify.

Key dates

02Disclosure timeline

November 18, 2024 CVE published

November 19, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-48897 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/285.html

Related vulnerabilities

04Related CVE

CVE-2026-40963 Apache Airflow: DAG authorization bypass on /ui/structure/structure_data CVE-2026-45275 Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability CVE-2026-7663 Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass